Bug in password reset

Reset script assumed that a userid was in the session, and it used
this userid to determine whom to email. This caused an internal server
error when no userid was in session.