Fixed a bug where email pw reset doesn't update pw