Reset password

Reset password links in this PR don't expire, is that ok?