fixed bug and add forgot password