password reset, cookie login, specs fixed