reset confirmation token rework wip
password reset functionality working