Fixed password change to not use get parameters, to change email based on response from account, and to temporarily go to login after password change. Reset password now also destroys all existing tokens.