Modified behaviour of forgotten password feature so that it does not reveal whether an e-mail address match was found #176