Fix phpdocs

Mostly fully qualified namespaces, incorrect classes or wrong/missing
return values.
Use hash_hmac SHA-1 when generating reminder tokens. Closes #1040.