A solution is outlined in this thread: Universal Login Reset Password Accepts Email But Only Says Username