Fixed #20079 -- Improve security of password reset tokens