added route to reset password after email is sent