router.post('/forget-password', function(req,res){
  var userEmail = req.body.payload.email;
  Staff.getUserByEmail(userEmail, function(err, user){
    if(err) res.json({error:err});
    if(user==null){
      res.json({success: false, error: 'Invalid e-mail'});
    }else{
      Staff.generateAndChangeToRandomPassword(user.email, function(err, password){
        if(err) res.json({error:err});
        else{
          // create reusable transporter object using the default SMTP transport
          var transporter = nodemailer.createTransport({
              service: 'gmail',
              auth: {
                  user: 'seniorfoodtour@gmail.com',
                  pass: 'bubibubi'
              }
          });
          // setup email data with unicode symbols
          var mailOptions = {
              from: '"Senior Food Tour" <seniorfoodtour@gmail.com>', // sender address
              to: userEmail, // list of receivers
              subject: 'Retreiving Password', // Subject line
              text: 'Your password has been reset\nPassword: '+password+'\nPlease login-at http://128.199.172.136:3000/',
              html: '<h1>Your password has been reset</h1></br> Password: <b>'+password+'</b></br> Please login-at http://128.199.172.136:3000/' // html body
          };
          // send mail with defined transport object
          transporter.sendMail(mailOptions, function(err, info){
              res.json({success: true, detail: info});
          });
        }
      });
    }
  });
});