What might happen with those users who didn't enter an email address? (including me...)
How can they log in again, if all passwords were resetted?