Password reset bug fixes, token now expires in 3 hours