add forgotPassword handler