Users.Views: Use validate_on_submit.

I couldn't before because I was attempting to use
wtforms instead of Flask-wtf for my password
reset/request forms.