Working reset email.
Working reset token, sent in email and used to reset the user's password.
Don't allow empty password reset token.