we use forceAuth so we do not need to logout in forgot pin (bug 838812 & bug 836860)