We're all assuming there isn't a "current password" field right next to "new password" on the reset form. Most of them do, though there are arguments that they shouldn't.