fix password reset token generator so that it works for non-Neo users