Fixed password reset, don't toy with request.user