Could we move this line to the `set_reset_password_token` and remove the second `save` call?