Added user_forgot to not_redirect_urls

Or write a decorator
```
@do_not_redirect
@app.route('/signup/', methods=['GET', 'POST'], endpoint='signup')
@app.route('/signin/', methods=['GET', 'POST'], endpoint='signin')
def auth():
...
```