currently, there is no “e-mail” field on a trader or investor (which is treated the same in this situation). But we will have a field called “additional information” which should be used to hold data which the user has to provide upon password reset. This field can be used to hold an e-mail address and then the user has to provide his e-mail address to make sure that no one else can reset his password (unless this other person knows the user’s e-mail address, of course).