reset password now usess the standard verify2 technique