@RequestMapping(
     value = "/account/reset_password/finish",
     method = RequestMethod.POST,
     produces = MediaType.APPLICATION_JSON_VALUE)
 @Timed
 public ResponseEntity<String> finishPasswordReset(
     @RequestParam(value = "key") String key,
     @RequestParam(value = "newPassword") String newPassword) {
   if (!checkPasswordLength(newPassword)) {
     return new ResponseEntity<>("Incorrect password", HttpStatus.BAD_REQUEST);
   }
   User user = userService.completePasswordReset(newPassword, key);
   if (user != null) {
     return new ResponseEntity<String>(HttpStatus.OK);
   } else {
     return new ResponseEntity<String>(HttpStatus.INTERNAL_SERVER_ERROR);
   }
 }