passwordResetTokenExpire time moved from params.php to Users class