Adjust size of password_reset_token.

A typical md5 string is only represented by 32 hex
characters rather than 120 characters.