Password reset links are sent only to the account owner.