Added user_forgot to not_redirect_urls

Maybe put these URLs into global variable?
``` python
DO_NOT_REDIRECT_URLS = [flask.url_for(u) for u in ['signin', 'signup', 'user_reset', 'user_forgot']]
```