Removed username requirement for password resets

As per user feedback, many people don't know their username.
Merge remote-tracking branch 'origin/password-resets'