JsonLoginPasswordReset request handler #3

Also fixed issue in users.UserSession.create_user_session() where **kwargs was missing (appeared to have issue with @classmethod decorator?)