password reset function: part 3