Clean previous session after user requested new password.

[awesemo]

The scenario:

1. "duration_in_minutes" was set to "15 minutes"
2. The lockout was triggered and the user was redirected to the password recovery.
3. User requested a new password and successfully logged in to the site.
4. User logged out.
5. User will not be able to login again since the previous session is still active.

Is this normal? I'm thinking of once the user successfully logged in to the site, the previous session should be cleared already.