handled case where user wants to reset pw