bug 1138: added ticket validation for password reset