added validation to password reset