moved change_pass to basic_auth and fixed some typos with the moving of forgot pass