Fixes #34

flask_security/views.py

@@ -227,6 +227,7 @@ def reset_password(token):
     form = ResetPasswordForm()
 
     if form.validate_on_submit():
+        after_this_request(_commit)
         update_password(user, form.password.data)
         do_flash(*get_message('PASSWORD_RESET'))
         login_user(user, True)

tests/functional_tests.py

@@ -424,6 +424,7 @@ class RecoverableTests(SecurityTest):
             'password_confirm': 'newpassword'
         }, follow_redirects=True)
 
+        r = self.logout()
         r = self.authenticate('joe@lp.com', 'newpassword')
         self.assertIn('Hello joe@lp.com', r.data)