moving forgot_password views back to gmg/auth and cleanup