remove commented out code. Update comment
update the LMS password_reset flows to adhere to the security policies