old_contents: var async = require('async');
  var crypto = require('crypto');
  var nodemailer = require("nodemailer");
  var User = require('../models/User');
  var secrets = require('../config/secrets');
  
  /**
   * GET /forgot
   * Forgot Password page.
   */
  
  exports.getForgot = function(req, res) {
    if (req.isAuthenticated()) {
      return res.redirect('/');
    }
    res.render('account/forgot', {
      title: 'Forgot Password'
    });
  };
  
  /**
   * POST /forgot
   * Create a random token, then the send user an email with a reset link.
   * @param email
   */
  
  exports.postForgot = function(req, res) {
    req.assert('email', 'Please enter a valid email address.').isEmail();
  
    var errors = req.validationErrors();
  
    if (errors) {
      req.flash('errors', errors);
      return res.redirect('/forgot');
    }
  
    async.waterfall([
      function(done) {
        crypto.randomBytes(32, function(err, buf) {
          var token = buf.toString('base64');
          done(err, token);
        });
      },
      function(token, done) {
        User.findOne({ email: req.body.email.toLowerCase() }, function(err, user) {
          if (!user) {
            req.flash('errors', { msg: 'No account with that email address exists.' });
            return res.redirect('/forgot');
          }
  
          user.resetPasswordToken = token;
          user.resetPasswordExpires = Date.now() + 3600000; // 1 hour
  
          user.save(function(err) {
            done(err, token, user);
          });
        });
      },
      function(token, user, done) {
        var smtpTransport = nodemailer.createTransport('SMTP', {
          service: 'SendGrid',
          auth: {
            user: secrets.sendgrid.user,
            pass: secrets.sendgrid.password
          }
        });
        var mailOptions = {
          to: user.profile.name + ' <' + user.email + '>',
          from: 'hackathon@starter.com',
          subject: 'Hackathon Starter Password Reset',
          text: 'You are receiving this because you (or someone else) have requested the reset of the password for your account.\n\n' +
            'Please click on the following link, or paste this into your browser to complete the process:\n\n' +
            'http://' + req.headers.host + '/reset/' + token + '\n\n' +
            'If you did not request this, please ignore this email and your password will remain unchanged.\n'
        };
        smtpTransport.sendMail(mailOptions, function(err) {
          req.flash('info', { msg: 'We have sent an email to ' + user.email + ' for further instructions.' });
          done(err, 'done');
          res.redirect('/forgot');
        });
      }
    ]);
  };
  
new_contents: var async = require('async');
  var crypto = require('crypto');
  var nodemailer = require("nodemailer");
  var User = require('../models/User');
  var secrets = require('../config/secrets');
  
  /**
   * GET /forgot
   * Forgot Password page.
   */
  
  exports.getForgot = function(req, res) {
    if (req.isAuthenticated()) {
      return res.redirect('/');
    }
    res.render('account/forgot', {
      title: 'Forgot Password'
    });
  };
  
  /**
   * POST /forgot
   * Create a random token, then the send user an email with a reset link.
   * @param email
   */
  
  exports.postForgot = function(req, res) {
    req.assert('email', 'Please enter a valid email address.').isEmail();
  
    var errors = req.validationErrors();
  
    if (errors) {
      req.flash('errors', errors);
      return res.redirect('/forgot');
    }
  
    async.waterfall([
      function(done) {
        crypto.randomBytes(32, function(err, buf) {
          var token = buf.toString('base64');
          done(err, token);
        });
      },
      function(token, done) {
        User.findOne({ email: req.body.email.toLowerCase() }, function(err, user) {
          if (!user) {
            req.flash('errors', { msg: 'No account with that email address exists.' });
            return res.redirect('/forgot');
          }
  
          user.resetPasswordToken = token;
          user.resetPasswordExpires = Date.now() + 3600000; // 1 hour
  
          user.save(function(err) {
            done(err, token, user);
          });
        });
      },
      function(token, user, done) {
        var smtpTransport = nodemailer.createTransport('SMTP', {
          service: 'SendGrid',
          auth: {
            user: secrets.sendgrid.user,
            pass: secrets.sendgrid.password
          }
        });
        var mailOptions = {
          to: user.profile.name + ' <' + user.email + '>',
          from: 'hackathon@starter.com',
          subject: 'Hackathon Starter Password Reset',
          text: 'You are receiving this because you (or someone else) have requested the reset of the password for your account.\n\n' +
            'Please click on the following link, or paste this into your browser to complete the process:\n\n' +
            'http://' + req.headers.host + '/reset/' + token + '\n\n' +
            'If you did not request this, please ignore this email and your password will remain unchanged.\n'
        };
        smtpTransport.sendMail(mailOptions, function(err) {
          req.flash('info', { msg: 'An e-mail has been sent to ' + user.email + ' with further instructions.' });
          done(err, 'done');
          res.redirect('/forgot');
        });
      }
    ]);
  };
  
subject: Update flash message on successful forgot password request