diff --git a/yadc/bp/auth.py b/yadc/bp/auth.py
index a28a47a..413227b 100644
--- a/yadc/bp/auth.py
+++ b/yadc/bp/auth.py
@@ -45,6 +45,7 @@ def reset_password():
 
     form = ResetPasswordPassForm(request.form)
     if request.method == 'POST' and form.validate():
+        user = User.query.filter_by(email=form.email.data).first()
         user.create_password(form.password.data)
 
         flash('Password successfully reset.') # for real