routing using states instead of url
UI for lost password action