add new forgotten password model

@buildmaster is this the right idea?
ok but I'd prefer if this actually checked the error that was thrown. see .to.be.rejectedWith