added forgot_password and persistent keys (for need_to_change)