typo passwordResetToken -> passwordResetTokens