fix password reset to use EMAIL_FROM_ADDRESS as sender

[jacobshilitz]

email reset is currently falling back to DEFAULT_FROM_EMAIL which fallback to webmaster@localhost

I would also strongly suggest not to show on the front-end the SMTP error for security