Fixed high severity security issue

Today's hotfix (12964b5) brings with it the following change:

Security improvements

• Fixed a high severity issue in the reset_pw request handler.