use FxA web flow for forgot pin (bug 1033711)

Generally we've used objects for params like this. Makes it easier to see in the caller what's what.