malclocke/fulcrum — pull request #123 by ryanbriones (2012-09-10 23:26:19+00:00)
Title: Fix issue where password change after initial confirmation fails

...due to expired password reset token.

Weird issue I noticed when setting up an instance. Every person who I invited to the project experienced an expired password reset token after confirming. A quick look at the code showed that callback was setting the password reset token but not the "sent at" field resulting in an invalid token.

Also the integration that was testing the confirm/password flow was manually setting the sent at column so it probably wasn't being identified.

This changes the setting of the reset_token to the protected method that handles everything properly and removes the masking code from the integration test.