added reset forgotten password functionality
modified token generation