Make resetEmail optional for iframe

This PR makes the library more flexible (or at least more explicit) when there is no `resetEmail`. Addresses issue #17: when writing a couple implementations on the iframe, we found we will not always have a `resetEmail`.