user_resets_password passes