Make password resets show correct errors and clear the token after resetting