SSL fixes; work on password reset