Use 'sent' date for new password expiry check