~0.4.0 of express-forgot-password.
use 0.4.1 of express-forgot-password