checking password reset token first time