TRUNK-3933:Forgotten Password Form Leaks Valid Usernames