allowing reset password with only username or only email.