apply security polity for lost password