[#5] User can reset own password