no longer sending duplicate password reset emails