re-fixed a the password_forget functionality