i don't think. We should set the reset_password_sent_at at the time when we are actually sending the mail.
wdyt?