move updating total out of loop for password_reset (ala #42)
If the user is prompted to enter an existing password, we don't have a new user flow
Merge pull request #43 from kparlante/master

Ignore 'canceled' flows that aren't new users