Use different tokens for different things

- Added ApplicationToken as base token class
- Added PasswordResetToken
- Added V1::PasswordResetsController#update
- Added token specs