Hookup reset flow (bug 1003882) 

~~TODO: Add the rest of the tests + clean-up.~~
Iirc there was a bug for that in webpay at some point (can't find it from a quick search). I'm not sure that scenario is handled presently. Either way that state isn't managed in the client currently, wouldn't that scenario mean you'd reset the second user's pin? It certainly shouldn't be possible for user B to reset the pin for user A and the backend should govern that.

One thing I'm not sure about is whether the data attr for the logged-in-user needs resetting in the SPA onlogout. In the spa case the backend isn't serving a new view that will clear that.