checking in current password reset changes

still need to create token and add to database