GitLab fixes a critical password reset vulnerability