fix: enable password_reset and passwrd_reminder pages without authentication