improved password reset flow if email is not found