markup for password reset page