Using HMAC token to reset password with email

Signed-off-by: Evan Tedesco <evantedesco@gmail.com>