switched reset password task to use ENV var