add current_user in g, generation for the forgot-password URL