[AllowAnonymous]
    public async Task<ActionResult> ResetPassword()
    {
        var provider = new DpapiDataProtectionProvider("AppName");
        var userManager = new UserManager<ApplicationUser>(new UserStore<ApplicationUser>());
        userManager.UserTokenProvider = new DataProtectorTokenProvider<ApplicationUser>(provider.Create("EmailConfirmation"));
        string userId = Request.QueryString["UserId"];
        string code = Request.QueryString["code"];
        var user = await UserManager.FindByIdAsync(userId);
        //if (!(await UserManager.ConfirmEmailAsync(userId, code)).Succeeded)
         ApplicationDbContext context = new ApplicationDbContext();
            UserStore<ApplicationUser> store = new UserStore<ApplicationUser>(context);
        if (!await userManager.UserTokenProvider.ValidateAsync("EmailConfirmation", code, new UserManager<ApplicationUser>(store) , user))
        {
            return RedirectToAction("Message", "Home", new { status = false, message = "Invalid token, please retry." });
        }
        return View("ResetPassword", new ResetPasswordModel { UserId = userId, Token = code });
    }