fix(reset_password): strip spaces in token and code