finish the function forget_password for the second step