Forgot password Step 3 tests ported. Changed the GET /changepassword to not do a redirect on errors