add reset password for client(user)
Merge remote-tracking branch 'pb/master'

merge reset and session_nil