Add restore password token protection.