typo fix
registration verification done right using hmac authentication
convert pw reset to use hmac authentication tokens