added /forgot route to api, and hooked up sendmail