set resetTokenCtime to null if resetToken is set to null
minor refactorings
add reset password and change password functionality