added forgot password, register to url's white list