Pass the token into the password reminder email callback

I'll add details.
Fix order of variables.
Merge branch '4.1'