- [ ] User must be able to enter their email address to request a reset password email - [ ] Responses must look exactly the same if the email exists or not