Reset password allows user to change email
I noticed a problem, at least for me, when testing the forgotpassword page built with SA wizard. I did not do any changes to it but tested it straight from the wizard. When the user recieves the email with the reset password link and is taken to that page its possible to change the email address to whatever along with the password. I did not reflect over this before and Im not sure this is the way it is supposed to be!? I would prefer that a user changing his password through that page has to enter his/hers registered email address and if it is not correct displaying a messege about the problem. Could I change this easily?
Thanks in advance,