{{--
Two plain forms, no JS/AJAX:
1. Email + "Send OTP" -> posts to forget_sendotp, page reloads,
session flash "otp_sent" controls whether the OTP form below shows.
2. OTP + "Submit" -> posts to forget_verifyotp, redirects to
reset_password_form on success or back with an error.
--}}
@if (session('otp_sent'))
@endif