Forgot password management for @itrocks/user, including form, token generation, email sending, and secure reset