In case of new password activation on password update, old login keys aren't reset, that may lead to unauthorized login (f.e. in case password was compromized and changed by someone else a user won't know that and will autologin as usually).