forget password and some server code fixes