* Added password reset token:
  - can create one from a given existing user's email address
  - can set the expiry of the token (in milliseconds)
  - can find one by token string