So i have a password reset page, the user fills in their username, they get an email, they click on the link, change their pass and it says "You successfully changed your password and you are now logged in." Only when you look up there is a login box and it indicates you are not logged in yet.
My question is, can i prevent the pass reset to NOT automatically log in after the password was reset? Alterantively can i make the page refresh somehow so that the login form realises this person is already logged in and says so?
I don't have a solution for you, but I can tell you the password reset page has no way of turning the auto-login off. Interestingly enough, the code comment directly above the login code reads "There should probably be an attribute that turns this functionality on/off". I guess it was never added.
Haha yes there definitely should be!
:( so no solution for me