Bug fix in password reset authorization check.