add in logic so that if a user tries to re-set their password but does't complete it, they are still able to sign in with their old password #155

Closed cmacaulay closed 7 years ago