Use hexdigest for password reset token.

This is so I can route urls using the token.