Note: For demo purposes, resetting requires only your username. In production, implement secure verification.