Updated passwords_controller to accept password reset

Added :reset_password_token to permit in passwords_controller.rb and
updated recoverable field :reset_password_sent_at to default to
Time.now.

Also updated expiration to 1.days before confirming