Ask for, but don't require email

Prepare for reset password email loop
Handle uniqueness violations in repository