reset password function: part 2