sign out current user prior to password reset
ignore old reset requests
add notice wrt the redirect
don't show current page as nav option