user reset password tested & before refactoring