add password resets and email confirmation