contract for password reset has changed - expects a function getEmailForPasswordReset()