"forgot password" feature working

- just one missing stmt.executeUpdate(sql); line