fix(client): Only send a `link_expired` event if the password reset link...

... is expired.

fixes #1283