Login results after password reset:
- old password: invalid login
- new password: valid login
- replay reset password: invalid login

This confirms the password did change, while old session still remained valid.
