scaled down resource  routes for password resets; don't need all 7