Return false when a token could not be used to find a user
Create an API request that finds the user info for the reset token