When I use the widget or the recover password one, from a test user account, I get the answer:
Forbidden
You don’t have permission to access /wp-login.php on this server.
Apache/2.4.37 (Debian) Server at thewisdomfactory.net Port 80
What does that mean and what do I need to do to make it work?