Allow password reset email to be sent to any verified email address
Description
Currently the password reset email is only sent to the primary email address. If a user loses access to their primary email address, they should still be able to receive the password reset email if they have a secondary email address in their profile.
Proposal
Send the password reset email to whichever email address the user has requested as long as it is verified
Edited by Cynthia "Arty" Ng