added password resets fields to User