Only accept email when resetting password