warn users if we can't reset their password