Slack has automatically reset the passwords of a small number of users after discovering a bug in invitation links that sent hashed passwords to other users.