in app/controllers/password_resets_controller.rb [24:37]
def update
if params[:user][:password].empty?
@user.errors.add(:password, "can't be empty")
render 'edit', status: :unprocessable_entity
elsif @user.update(user_params)
reset_session
log_in @user
flash[:success] = "Password has been reset."
redirect_to @user
else
render 'edit', status: :unprocessable_entity
end
end