public function resetPassword($userId) {
        $user = $this->Users->get($userId);
        if(!empty($this->request->data['newpw'])) {
            $hasher = new \Cake\Auth\DefaultPasswordHasher();
            $newPw = $hasher->hash($this->request->data['newpw']);
            $user->password = $newPw;
            if($this->Users->save($user)) {
                $this->Flash->success('Ihr Passwort wurde geändert.');
                $this->Auth->logout($user);
                return $this->redirect(['controller' => 'Users', 'action' => 'login', 'prefix' => false]);
            }
        } else {
            $this->Flash->error('Bitte geben Sie ein neues Passwort ein');
            return $this->redirect(['controller' => 'Users', 'action' => 'view', $user->id, 'prefix' => false]);
        }
    }