#view/edit
<h1>Change My Password</h1>
<% form_for @user, :url => password_reset_path, :method => :put do |f| %>
  <%= f.error_messages %>
  <%= f.label :password %><br />
  <%= f.password_field :password %><br />
  <br />
  <%= f.label :password_confirmation %><br />
  <%= f.password_field :password_confirmation %><br />
  <br />
  <%= f.submit "Update my password and log me in" %>
<% end %>
~

#controller
class PasswordResetsController < ApplicationController
  skip_before_filter :authenticate
  before_filter :load_user_using_perishable_token, :only => [:edit, :update]
def create
    @user = User.find_by_email(params[:email])
    if @user
      @user.deliver_password_reset_instructions!
      redirect_to pw_success_url
    else
      redirect_to pw_failure_url
    end
  end

  def update
    puts "*********Made it to update************"
    @user.password = params[:user][:password]
    @user.password_confirmation = params[:user][:password_confirmation]
    if @user.save
      redirect_to login_url
    else
      render :action => :edit
    end
  end
private
  def load_user_using_perishable_token
    @user = User.find_using_perishable_token(params[:id])
    unless @user
      flash[:notice] = "We're sorry, but we could not locate your account. " +
      "If you are having issues try copying and pasting the URL " +
      "from your email into your browser or restarting the " +
      "reset password process."
      redirect_to login_url
    end
  end
end