update lost password to check for email too