fix bug about forgotten password