#332703 by Damien Tournoud, hajo: user password request should check name access rules against names, email access rules against emails