fix bug of sensitive email bug in password reset html