Avoid Username/Email is passed as clear GET Parameter to CheckEmailAction on password reset process

Avoid Username/Email is passed as clear GET Parameter to CheckEmailAction on password reset process #2496