TRUNK-3933 Forgot Password Form Leaks Valid Usernames