Actually, we need the email to reset a password if things are to be secure