updated forgot passwords controller