Add token class
Add User#password_reset
Sqlite doesn't give two shits about limits