Single-use recovery

Reset tokens are short-lived and never stored in plaintext.