update user controller & model. reset & cancel reset password fn added