refactored payment, added resetpassword