fix(oauth): fixes WebChannel double submit during password reset