Add tests to make sure certain tokens are replaced

For accountResetTokens, passwordForgotTokens and passwordChangeTokens
we only allow one per accounts.uid and therefore when a 2nd one is
inserted it should be replaced instead of in addition to the first.
These tests make sure that this happens correctly.