new workflow for the lost password use case