Anyone know why the password reset would only work if the customer enters their username and does NOT work if they enter their email address? (this is using the forgot your password form on the login form in an E-Commerce site) Even though when they enter their email address, they get the password reset email and the reset password page indicates a success in updating their password?

One thing I noticed is the system is allowing customers to sign up with the same email address more than once as long as they pick a unique username and also that they don't pick an email address that is already in use by a CMSDesk admin user. So it does make sense that the system would not know which username to change the password for when an email address is entered (if more than one exists for that email) but then why does the system accept email address OR username instead of just username. And it does send the email with the link to reset my password, even in the case when there are multiple usernames with the same email. And I tried it with customers that have a unique email address as well as those with duplicate email addresses - it never actually resets the password if you submit the request with an email address. What am I missing here? A setting? any help will be greatly appreciated.

Thanks,
Matt