diff --git a/yadc/bp/auth.py b/yadc/bp/auth.py
index 413227b..f8af34f 100644
--- a/yadc/bp/auth.py
+++ b/yadc/bp/auth.py
@@ -47,6 +47,7 @@ def reset_password():
     if request.method == 'POST' and form.validate():
         user = User.query.filter_by(email=form.email.data).first()
         user.create_password(form.password.data)
+        db.session.commit()
 
         flash('Password successfully reset.') # for real
         return redirect(url_for('.login'))