Fix #9

Closes #9; renamed create_password_reset_url() to create_password_forgot_url(); is more consistent with password recovery terminology.