adds token to user class
users updated with tokens
reset password page gives post error