diff --git a/VERSION b/VERSION
index cd5f07a1..3771e4c1 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-Version 2.8.2-stable+timestamp.2013.12.02.10.26.58
+Version 2.8.2-stable+timestamp.2013.12.03.00.40.46
diff --git a/gluon/tools.py b/gluon/tools.py
index 874ad220..afb258f8 100644
--- a/gluon/tools.py
+++ b/gluon/tools.py
@@ -2915,7 +2915,7 @@ class Auth(object):
                         formname='reset_password', dbio=False,
                         onvalidation=onvalidation,
                         hideerror=self.settings.hideerror):
-            user = table_user(**{userfield:form.vars.email})
+            user = table_user(**{userfield:form.vars.get(userlfield)})
             if not user:
                 session.flash = self.messages['invalid_%s' % userfield]
                 redirect(self.url(args=request.args),