forgot password middleware for lockit