Users can reset password using the token