Make isTokenValid timing safe
Merge pull request #1 from ircmaxell/reset-password-timing-fix

Reset password timing fix