Fix password-reset hash to use same encryption as config

Configuration has encryption options of: md5, sha1, default is md5.
If you use sha1, users can create accounts (using sha1), but if they
reset password OJS would default to resetting using md5 hash, and user will
get an email with invalid reset token. This fix uses the existing
hash encryption technique.