Post settings published_at date improvements & fixes

closes #1866, fixes #2067, fixes #2068

- Upgrade client side moment to 2.4.0 to match the server side script.
- Add a guard to pub date to fix #2067
- Add new format to close #1866
Merge pull request #2077 from ErisDS/date-fixes

Post settings published_at date improvements & fixes
Improve password reset token

no issue
- added check that a combination of email + expires is rejected after
10 attempts
- changed comparison to time independent method

Thanks to @chiiph for reporting this issue!
Merge pull request #2082 from sebgie/fix-reset-token
Version bump for 0.4.1
Merge branch '0.4-maintenance'