Update the token for the more secure password recovery. Fixes #1936