Show error message on invalid reset password attempt

For #5321 
Why bother to create a user?