shifted session start to the top and added processing forgetpassword