Password reset: use username as email if applicable