added /password/forgot/status endpoint