You are using the ASP.NET membership APIs to manage user accounts for a Web site. The Web.config file contains the definition for the membership provider. After modifying the Web.config file to enable password recovery, you create a PasswordReset.aspx file.? You need to enable users to reset their passwords online. The new passwords must be sent to them by e-mail after they have logged on through the Login.aspx page. In addition, users must be required to answer their secret questions before resetting their passwords. Which code logic should you use?（）

Add a PasswordRecovery element to the PasswordReset.aspx file and configure it.
B. Modify the Page_Load to set the Membership.EnablePasswordReset to True in the PasswordReset.aspx file.
C. Add a ChangePassword element to the PasswordReset.aspx file and configure it.
D. Modify the Login.aspx form to include a Required Field validator on the secret question answer text box. Then redirect users to the PasswordReset.aspx file.