added /password/forgot/status endpoint

With this you can do a GET with your passwordForgotToken to get how many `tries` and the `ttl` remaining on the given token. When the token is consumed by a successful reset or expires you can expect to get a 401 HTTP status code with an errno of 110.

r?