@johnbenz13 the password resetting feature has been implemented carefully to avoid leaking the existence of a username there as well IIRC