Password Reset: clean up when it failed

when a password reset failed, it should be removed with another PUT request from the client, after the error has been triggered.