Create password token link that checks against the users token