allow unverified users to change password
fix double head body in forgot_password
Merge pull request #687 from teravest/changeunverified

allow unverified users to change password