Password reset shows success regardless of whether or not email address is known

[tlrh314]

Attempting to get a password reset with https://fairblogs.nl/accounts/password_reset using sjenkie@sjenk.sjenk leads to a success message.

https://fairblogs.nl/accounts/password_reset/done/

Perhaps the password reset should do a lookup to check that the user exists, if so show success message, and if not show an 'unknown email address' message