added missing post action for /forgot password requests (this action requires both GET and POST)