Why not use haveibeenpwned.com as something extra, added to readme
Added google.com as allowed domain for Gmail reading
Started work on reading reset emails