set reset password routes in a different route file. ref #32