token reset passwd

config/config.js

 module.exports = {
   development: {
     app: {
-      hostname: 'm4lab.hft-stuttgart.de/account/',
+      hostname: 'm4lab.hft-stuttgart.de/account',
       name: 'User Account Management',
       port: process.env.PORT || 9989
     },

routes/routes.js

@@ -364,11 +364,12 @@ module.exports = function (app, config, passport) {
   });
 
   app.post('/reset/:token', function(req, res) {
+    var newPwd = req.body.inputNewPwd  
     methods.checkUserToken(req.params.token, function(err, user){
       if (user) {
         // update password
         bcrypt.genSalt(saltRounds, function(err, salt) {
-          bcrypt.hash(req.params.inputNewPwd, salt, function(err, hash) {
+          bcrypt.hash(newPwd, salt, function(err, hash) {
             methods.updatePassword(hash, user.email, function(err){
               if (err) {
                 req.flash('error', "Database error: Password cannot be modified.")