--- openapi: post /auth/forgot ---