Password reset fix

I can't add this comment on line 24, so it's going here.

This middleware no longer does what its name says. The second half of the docstring is still correct.

I would also suggest turning the elif into an if and removing the existing if.