Implemented the password-reset redirect _properly_ instead of the hackish direct header() call in sessions.php

.mceItemHiddenSpellWord {background:url(../img/wline.gif) repeat-x bottom left; cursor:default;}