05/24 Fix bugs

routes/auth.py

@@ -8,6 +8,7 @@ from models import (
     authenticate, check_login_allowed, change_password, log_action,
     get_user_by_email, create_password_reset_token,
     get_password_reset_user, consume_password_reset_token,
+    purge_expired_reset_tokens,
 )
 from utils.decorators import login_required
 from utils.email import send_email
@@ -46,6 +47,10 @@ def login():
                     "role":      user["role"],
                     "email":     user.get("email", ""),
                 }
+                try:
+                    purge_expired_reset_tokens()
+                except Exception:
+                    pass  # non-critical cleanup; never fail a login because of it
                 logger.info(f"User '{username}' logged in from {ip}.")
                 flash(f"You have been signed in. Welcome, {session['user']['full_name']}!", "success")
                 if user["role"] == "admin":