try using user object to find reset_password_token