Error 500 during checkout after reset of password

[marcaltmann]

Users putting something into the cart, then resetting their password before trying to log in, cannot checkout that cart.

Probably the reason is that the user is logged in immediately after the password reset and the anonymous cart is not refered to the user as after a normal login.

[marcaltmann]

Can reproduce this bug. When updating passwords the sessions#create action is not called (which contains the code for updating the cart with the user_id), the user is logged in anyway apparently via devise/passwords#update.

[marcaltmann]

passwords#update needs to be overridden and do the same stuff as sessions#create.