fixes issue #63

fixes issue #63 

User is re-logged in upon setting a new password
Do we need to pass in the email and password here? Can't those be read out of the user object rather?