CB

Separate forgot login into forgot password and forgot username pages respectively. No longer require username for forgot password. In the case of generated passwords it would just email them their new password, but in the case of user supplied DO NOT DO THIS (bad security to send plaintext passwords in email!) instead send a URL that when used gives them a page to supply their new password.