Fixed a security hole for password resets.