-Changed to only remove password reset session flag if the password reset actually works.

#1157