added password-reset functionality