fix api key random seed, add forgot password api which sends emails via bluehost smtp server