If the email can receive mail, we will send a verification code.
Password reset responses do not reveal whether an account exists.