add new forgotten password model

@buildmaster is this the right idea?