add two account management APIs /forgotpassword and /passwordReset