fix(oauth): fixes WebChannel double submit during password reset

Fixes #1809

- [x] need to update some tests