Users can request/recieve a 'forgot password' email