Previously, the password validation logic for the `/reset_password`
route was reversed: An error was returned when the password was valid
and the operation would succeed when the password was invalid.
This commit fixes the logic to return an error when the validation fails
and proceed with resetting the password when the password is valid.
