fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

test/user_test.go

@@ -205,6 +205,7 @@ func (m *mockUserRepo) ResetPassword(userId uint32, hashedPassword string) (user
 	u.Password = hashedPassword
 	u.PasswordResetCode = ""
 	u.PasswordResetExpiration = time.Time{}
+	u.TokenVersion++
 	m.users[userId] = u
 	return u, nil
 }