added rate limiting to password reset endpoint
renamed TokenGenerator to PasswordResetTokenHandler and added Expire to function name