client.py's lost password mechanism doesn't respect the 
SENDMAILDEBUG environment variable.

Also there are 
a couple of typo's in the removal
of old otks.

This patch 
fixes these.