fix authentication for forgot password