add new forgotten password model

@buildmaster is this the right idea?
and it should be unique.