Tell us what needs to move.

Backend note: validate and sanitize server-side, rate-limit this route, use Laravel CSRF protection, queue email notifications, and do not expose mail credentials in source control.