Users can reset their passwords
Annotating new password reset tokens