trying to include password_rest urls