Password reset tokens now have an hour lifespan.

Haven't bothered trying this on staging environment.