Moved password reset tokens & email verification tokens to their own models