Use strong parameters for password reset

Creating a new hash and inline the parameters feels like a hacky way to get around strong parameters. Instead, we can just use strong parameters outright.