Only let password reminders be valid for 1 hour. Fixes #1315.