fix forgot password checks

fix forgot password checks+status

fix forgot password checks+priority

fix forgot password checks+tag

fix forgot password checks+commit

fix forgot password checks+issues

There are two separate problems:

forgot password does not check whether an account is active before sending out its information
new account requests are being marked "active"

I got both of these working, and I got about 10 or 12 more assertions going on the account controller test (combo of old and new).