Cancel reset tokens on successful, interactive login

include/class.auth.php

@@ -322,6 +322,9 @@ abstract class StaffAuthenticationBackend  extends AuthenticationBackend {
 
         Signal::send('auth.login.succeeded', $staff);
 
+        if ($bk->supportsAuthentication())
+            $staff->cancelResetTokens();
+
         return true;
     }
 
@@ -431,6 +434,9 @@ abstract class UserAuthenticationBackend  extends AuthenticationBackend {
                 $user->getUserName(), $user->getId(), $_SERVER['REMOTE_ADDR']);
         $ost->logDebug('User login', $msg);
 
+        if ($bk->supportsAuthentication() && ($acct=$user->getAccount()))
+            $acct->cancelResetTokens();
+
         return true;
     }