Show error message if an email entered on the 'forgot password' page does not exist

[artem-dudarev]

Currently, when you enter non-existing email you still get the message Email with instructions has been sent to you. A client wants to see a message like This email does not exist, even though it is insecure.

Need to add such behavior as optional, and make it configurable through appSettings.