reset password / verify reset password are code complete and tested