Add test for password reset expiration