Implemented the password-reset redirect _properly_ instead of the hackish direct header() call in sessions.php
# Used for testing mod_rewrite.
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule (.*) install.php?do=modrewrite_test&str=$1
</IfModule>