reset works, but getting 500 error despite providing the correct token for updating pw
removed console.log