moving forgot_password views back to gmg/auth