Added password reset token expiration