ResetPasswordController now uses ID's SafeLogger

Log messages are now being sanitised and the logging for the controller has been improved.

Additionally handles the case where a token expired error comes back from the API along other errors. It now no longer assumes (in the match) that this will be the only error returned.