revision on password reset