Request a secure password-reset link. For privacy, the confirmation does not reveal whether an email is registered.