Merge branch 'feature/passReset' into release/5.6

@@ -475,6 +475,12 @@ const modPwdByCodeAPI = (req, res, next) => {
         newPwd: body.newPwd,
         token: req.session.CSToken
     }).then(d => {
+
+        if (d.code === 200 && req.session) {
+            delete req.session.CSToken;
+            delete req.session.canSkip;
+        }
+
         res.json(d);
     }).catch(next);
 };

@@ -92,7 +92,7 @@ $('#pwd, #repwd').keydown(function(e) {
 });
 
 $next.on('click', function() {
-    var refer = $weakPwdPass.data('href') || '/';
+    var refer = $weakPwdPass.data('url') || '/';
     var $this = $(this);
 
     // is frequent click