fix bug on reset, and check for user active before reset password