forgotPassword form do not require username to reveal secret question

We can reveal the secret question, while acting on forgot password, even with a blank username. This is an unexpected behaviour. The username field can not be left blank while revealing the secret question.