Generate a password reset token if the user exists.