all tests pass
password is reset when user forgets password