exports.tokenPost = function(req, res, next) {

  let password = req.body.password;
  let password_confirm = req.body.password_confirm;

  if(password != password_confirm) return res.status(400).json({message: 'Error passwords don't match. Please make sure they match'});

  async.waterfall([
    function(done) {
      User
        .findOne({ resetPasswordToken: req.params.token })
        .where('resetPasswordExpires').gt(Date.now())
        .exec(function(err, user) {
          if(err){
            console.log(err);
          }
          if (!user) {
            return res.status(400).json({success: false, message: 'We can't find a user with that reset token. Please try resetting your password again or contact customer support.'});
          }

          user.password = password;
          // user.resetPasswordToken = undefined;
          // user.resetPasswordExpires = undefined;

          user.save(function(err) {
            if (err) console.log(err);
            if (err) return next(err);
          });
        });
    },
    function(user, done) {
      console.log('This code is not being run);
      let message = 'Hello,nn' + 'this is a confirmation that the password for your account ' + user.email + ' has just been changed.n';
      sendEmail(`"Company Name" ${config.noreply}`, req.body.email, 'Password changed', message);
      res.status(200).json({success: true, message: 'Success your password has been changed.'});
    }
  ], function(err) {
    console.log(err);
    if (err) return next(err);

  });
};