add forgot password controller and secret key