Oh so I guess the "please fill in your reset email" counts as a security question. Makes much more sense thank you.