Checking that users cannot reset password if more than an hour has passed since requesting a token