actually changed the reset password token lifespan this time