Added another enumeration vuln with the 'forgot password' feature, addressing #39