Instant sign in when password reset

[vreithinger]

Bug report

Describe the bug

In the example given clicking on password reset and entering an existing email, one is instantly logged in without having to click on the link in the email or entering any password.

To Reproduce

Steps to reproduce the behavior, please provide code snippets or a repository:

1. Click on 'Forgot Password? Click here'
2. Type in email of existing account
3. Click on 'Send Reset Email' => One is logged in instantly

Expected behavior

1. Click on 'Forgot Password? Click here'
2. Type in an existing email
3. Click on 'Send Reset Email'
4. Click on Link in Reset Email
5. Get redirected to Password Reset screen
6. Get signed in or get redirected to sign in screen to type in new password