Only say we sent a password reset if we have an account for that email.
Merge pull request #29 from JohnThomson/feature/LimitSentReset

Only say we sent a password reset if we have an account for that email.