Reset password bug fix

- Resetting password did not work, because session variable was renamed
- New passwords can no longer be empty strings. In the future, probably should
  have a (larger) minimum length.