Reset password

Reset password links in this PR doesn't expire, is that ok?