finish password resets and testing