sandbox: forgotten password test