Email a reset link

For privacy, we show the same confirmation whether or not an account exists.