fixed reset password route/param