added some forgot_password functionality - but most of it is psuedo-ruby code