Adding a validation message to the forgotpw page - @ in username

People currently supplying an email address will get a crash error, which is sub-useful.

New message:

![Validation msg](http://jbrt.org/ddg/forgotpw_validation_msg.png)