When users try to use the reset password page, it allows them to put the information in but when they click the button it just says invalid key. Also, people who are not even members can go to that page. I think there should be some php code that redirects people who are not logged in. As of right now there is now way for members to change their password.