I find it funny how after resetting a password, I give them an option to then change their username, but that authenticated page requires them to now enter their password again to get to the page. If they've reset their password, they are logged in....or should be