Update forgot_password method to make sure a user was returned before
proceeding. If an email is entered that's not in the database it will
return to the forgot password page and display an error.
Updated forgotten_password method to only return user info if the
user is active.