Password recovery changes

Only require username to reset password.

Add text to reg form noting email is... "required for password recovery"