adds forgot-password feature
flash messages does not remain when a page renders