password reset feature finished but not fully tested