B/840 fix forgot password

`forgotPassword` is expecting the literal string `username` no matter what the custom user schema field is.  force it to `username` in the JS SDK.