fixed forgot password functionality