on the email password page, create the form with the email text box, the secret question select list and the answer text box.
Not sure if I understood your explanation here Jason. Do you mean one page (forgot password page) that has a form field for entering their email address which will display an error if no such email exists, but if correct, route to another page named email password which will contain the secret Q with a field for entering the secret answer they will submit, or were you meaning to put all three on the same page?
It seems like I'd need at least two pages. Otherwise I wouldn't be able to show the secret question they chose when setting up their profile until I at least had a valid email address to reference.