Password reset management with mails and tokens