Fixing "Invalid key" error when clicking link in password reset email

At present, when you attempt to reset your password, you receive the email, but the link to actually reset the password throws an "Invalid key" error.

This PR fixes this by checking the key against the stored key using phpass.