Thanks for all your hard work on this plugin! I also would LOVE to omit the username requirement for the forgotten password inquiry. My users are not likely to remember their user name (myself included). If I have to go find my user name I would search my emails to find it. If my email was compromised the person would already have my username and email address. For convenience I would recommend only the email. I've never been promoted to input username AND email for a reset, even on highly secure websites. If someone is that hell bent on getting into the site they'll find a way. ;)
For others with this problem, here is my workaround: I am going to implement a manual reset the passwords by uploading a contact form that asks a client for their email. When I get the reset inquiry I'll reset the password and email them their updated login information (username and email). It's NOT an automated system but it's my only option since I know my users won't remember their usernames. (I only use this for our social group so it's not a huge set of users, but for others this is not an option)
Please please include this feature in the next updates! Thanks!!!