help: forgotpw-submit uses --password for pw, not an argument
bail if we see unexpected positional arguments

This prevents things like "fxa-client --email foo create --password
bar", which didn't see the post-command "--password bar", and thus
created a new random password, leaving the account in a state where
login gave a "bad password" error).