feature test for password resets
user invitation
user invitation feature test
refactor token generator into concern