failing test for bruteforce protection unlock token generated after mail is sent
fix for bruteforce protection unlock token is set after mail is sent
Merge pull request #441 from sandrew/master

Unlock token in bruteforce protection is set to the model after the mail is sent