Secure forms

Some forms in Drupal core pose security concerns - for example, the password reset form displays an error message when a username/email address does not exist in the system. This means that valid usernames can be enumerated through the use of the reset password form.

Currently, this module secures the password reset form by overriding core's validation handlers and performing the same steps but instead of setting an error, simply redirecting and displaying a message as if the submission was a success.

Further enhancements will be added if similar issues are found with other forms.