Users.views: Prevent admin from viewing password_reset_token.