made has token and is in time method for users (to be used in create_accounts#confirm and reset passwords#reset password form)