However, if you do what you are saying, then how will the reset password flow work? Cause you won't have the user's email.