Removed username requirement for password resets

As per user feedback, many people don't know their username.