Add lostpassword method + CORS Origin fix