added a reset_password endpoint