add functionality in password_resets controller