Added code/expires_at and controller test for password reset.