Allow password reset requests via emails in addition to usernames

allow users to request password reset by inputting email as well as user names. May not be the best way to do this!