#14: add a special class=auth event for proper session identification at password reset