Fix bug in User#resetPassword

We should use `{ where: {email: options.email} } ` rather than `{email: options.email}` in UserModel.findOne.