User can reset password with correct password token; now just need to implement MailGun