S1 cf6 user forgot password

https://vinsol.atlassian.net/browse/CF-6
The hidden field is required. When a user clicks on the reset password link, reset_password_token is received as a query parameter which is again set by the edit action of passwords controller, so that when the user is resetting the password, the token can be used to validate the request.