Null reset codes were allowed

PKSA-p714-559s-qh89

Affected package: cartalyst/sentry

Affected version: <=2.1.6

Reported by:
FriendsOfPHP/security-advisories