[fix] password reset email will not be sent to email adress, not to username
[fix] password reset feature will not correctly accept password lengths