feat(user): added 'forgot password' feature