Update passwords_controller.rb

Add reset_password_token to permitted parameters, fixing issue with Devise recoverable.