TRUNK-3933 Forgotten Password Form Leaks Valid Usernames