correct lost password form (closes #4229)