Auto login after password reset

Hey guys, I came up with this for the auto login on password reset this morning, but I can't figure out why the account is persisted after the redirect.

I did the same thing the login route does but it doesn't seem to work... any clues? 

Fixes #30