Part of the fix for #80 can be done by using class-based views in Django 1.11
To avoid the possibility of leaking a password reset token via the HTTP Referer header (for example, if the reset page includes a reference to CSS or JavaScript hosted on another domain), the PasswordResetConfirmView (but not the deprecatedpassword_reset_confirm()function-based view) stores the token in a session and redirects to itself to present the password change form to the user without the token in the URL.
Coverage decreased (-2.2%) to 88.174% when pulling ef43c5c3d87918c4bbd3ee8d96552ef741c1c7c7 on joshblum:support-django-1.11 into 9a4adc6587d343f553f41e570508bc6f4ee0a5c5 on lambdalisue:master.
Coverage decreased (-2.2%) to 88.174% when pulling e5ba0f306fc540f34b34e20c173d78a791a34165 on joshblum:support-django-1.11 into 9a4adc6587d343f553f41e570508bc6f4ee0a5c5 on lambdalisue:master.
Coverage decreased (-2.2%) to 88.174% when pulling e5ba0f306fc540f34b34e20c173d78a791a34165 on joshblum:support-django-1.11 into 9a4adc6587d343f553f41e570508bc6f4ee0a5c5 on lambdalisue:master.
Coverage decreased (-2.2%) to 88.174% when pulling c44b74b3623355371c784fb858b7068c0aaf5e9b on joshblum:support-django-1.11 into 9a4adc6587d343f553f41e570508bc6f4ee0a5c5 on lambdalisue:master.
Coverage decreased (-2.2%) to 88.174% when pulling c44b74b3623355371c784fb858b7068c0aaf5e9b on joshblum:support-django-1.11 into 9a4adc6587d343f553f41e570508bc6f4ee0a5c5 on lambdalisue:master.
Coverage increased (+0.01%) to 90.424% when pulling de349f07fda1843579706a4dde86c2ca9191005a on joshblum:support-django-1.11 into 9a4adc6587d343f553f41e570508bc6f4ee0a5c5 on lambdalisue:master.
Part of the fix for #80 can be done by using class-based views in Django 1.11
https://docs.djangoproject.com/en/1.11/releases/1.11/#django-contrib-auth