class Lato::User

def update_password(params)
  password_update_code = c_password_update_code
  if password_update_code.blank?
    errors.add(:base, :password_update_code_expired)
    return
  end
  unless password_update_code == params[:code]
    errors.add(:base, :password_update_code_invalid)
    return
  end
  c_password_update_code('')
  update(params.permit(:password, :password_confirmation).merge(
    authenticator_secret: nil # Reset authenticator secret when password is updated
  ))
end