added forgot password link with rspec tests