Tell new users when their password reset token expires and provide a
link to get a new one.