updated reset endpoint
added password reset state with controller and templ
updated service to fetch logged-in user's groups