Password_reset#update destroys session, ending weird login situations