Add the ability to use an email address at /forgot

If multiple users are found to one email address a dropdown
is shown where the users can chose the right username

Fixes #330
forgot-password code reorganization and cleanup