Merge branch 'feature/passReset' into release/5.6

@@ -104,6 +104,9 @@ const syncUserSession = (user, req, res) => {
         if (user.canSkip && user.token) {
             req.session.canSkip = user.canSkip;
             req.session.CSToken = user.token;
+        } else {
+            delete req.session.canSkip;
+            delete req.session.CSToken;
         }
 
         if (isTipCert && isTipCert.code === 200 && isTipCert.data) {