initial hash versioning
reset -> logout -> login -> error: email to reset pass -> link from email to reset pass -> reset pass -> login -> pin was reset (to email) -> api key has now been reset