Require both user and email for anonymous password resets

app/views/devise/passwords/new.html.erb

@@ -4,12 +4,23 @@
   <%= render "devise/shared/error_messages", resource: resource %>
 
   <div class="field">
-    <%= f.label :email %><br />
-    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
+    <p>
+      <%= f.label :cn, 'User' %><br />
+      <%= f.text_field :cn, autofocus: true, autocomplete: "username" %> @ kosmos.org
+    </p>
+  </div>
+
+  <div class="field">
+    <p>
+      <%= f.label :email, 'Email address' %><br />
+      <%= f.email_field :email, autocomplete: "email" %>
+    </p>
   </div>
 
   <div class="actions">
-    <%= f.submit "Send me reset password instructions" %>
+    <p>
+      <%= f.submit "Send me reset password instructions" %>
+    </p>
   </div>
 <% end %>