Purge tokens on reset-password and verify email