Only allow 24 hours to reset a password