provide username in password reset email, closes #250