Fix for password resets not clearing the bad login count

Who would have thought that adding a test to increase the test coverage by a single line would lead to a bug fix :)

This patch depends on #37.
Perhaps we could create a module from https://github.com/mozilla/fxa-auth-server/blob/master/test/ptaptest.js and promisify `client`... unless you like the pyramid shape ;)