Warn the user when the password reset link is expired

closes #1381 (closed)

Because as it turns out it does expire, it just always looks like it works even though it does not (does not reset the password.)