add testing blank email when input email for forgot password
modify reset password token expire mechanism, and improve testing of reset password