forgot password is completely working, except the email function