Splitting off the forgot password code into its own controller so that it can be shared.

* Added forgotpassword_controller, forgotpassword.ejs, and forgotpassword_controller_unit_test.
* Updated the authenticate controller/template/tests to remove the forgotpassword stuff.
* Added several more tests to the authenticate suite.
* Hooking up the expanded forgot password flow for "required email".
* Unifying the styles between the "required email" screen and the normal flow.

issue #608