fixed password reset token weirdness