bug fixes for forgotten password