No service should use date of birth for password resets.