forgot pass works with username instead of email