added forgot password and reset password, added access to public urls