Fixes forgot password block

The passwords controller allows access to any Devise-password-related feature (unless Devise blocks it)

Related issue; https://github.com/boersmamarcel/challengesplatform/issues/126