prototype forgot password
forgot email validation
check used token
set SECURE_DOMAIN