log reset request and reset use into userlog
remove session id from the successful reset page
fix a warning