forgot password complete functionality; fixed session sharing bug