fixes "forgot password"