added a todo comment

src/server/routes/index.js

@@ -178,6 +178,7 @@ module.exports = function(crowi, app) {
 
   app.get('/forgot-password', forgotPassword.forgotPassword);
   app.post('/forgot-password', forgotPassword.api.post);
+  // TODO: apply oneTimeToken to the link by GW−6856
   app.get('/forgot-password/hogeToken', forgotPassword.resetPassword);
 
   app.get('/share/:linkId', page.showSharedPage);