encrypts/decrypts password reset tokens