That Slack email you just got asking to reset your password is legit, not a scam