forgotpassword: Creating unique reset tokens per request

Everytime a user requests a new password, any previous resets
in the backlog are cleared, and a new reset token is created.
The reset token is affixed to a url mapped to an email, that if
matching, allows a user to reset their password.