include salt in encrypted bundle from client on reset
use a single resetToken field instead of multiple
delete tokenId/hawk documents associated with signToken/resetTokens
Merge pull request #58 from mozilla/fix_reset_srp

Fix reset srp
add payload verification for fields expected to be hex strings