added a todo comment

src/server/routes/apiv3/forgot-password.js

@@ -49,6 +49,7 @@ module.exports = (crowi) => {
     const appUrl = appService.getSiteUrl();
 
     try {
+      // need to handle passwordResetOrderData when user not found and not active by GW7060
       const passwordResetOrderData = await PasswordResetOrder.createPasswordResetOrder(email);
       const url = new URL(`/forgot-password/${passwordResetOrderData.token}`, appUrl);
       const oneTimeUrl = url.href;