add blank page and route to assign new password