Issue 624

The password reset code should for this user should be cleared from the database so that if someone clicks the link in the user's email again, it does not allow them to reset the password again successfully (just verified that this is a vulnerability)