When trying to register with an existing email address, the response (par v1) is to return an 'Email Address Registered' error. This needs to be changed to a password reset, and responses for both registration and password reset respond a generic 'Check your email' message to prevent email address harvesting