add new forgotten password model

@buildmaster is this the right idea?
and also it should be a required field