user should be able to request a password reset link if it loses its password
user should be able to request a password reset link if it loses its password