"Email is required to reset a password". Should return a 400 status