fix password resets (fixes #150)