app.js - fogot password functionality