Password Resetting Refactor

Removed some legacy code left over from porting over from DTA. When visiting a password reset url from an email, it will now clear the refresh token cookie and there for sign the user out preventing the user from doing anything except resetting their password.