Optionally renew token on password reset