Warn the user when the password reset link is expired

closes #1381 (closed)

Because as it turns out it does expire, it just always looks like it works even though it does not (does not reset the password.)

arkindex/users/tests/test_password_reset.py

@@ -75,7 +75,7 @@ class TestPasswordReset(FixtureAPITestCase):
             },
             format="json",
         )
-        self.assertEqual(resp.status_code, status.HTTP_201_CREATED)
+        self.assertEqual(resp.status_code, status.HTTP_400_BAD_REQUEST)
         self.user.refresh_from_db()
         self.assertFalse(self.user.check_password("S3cr37Pa$$w0rd"))
         self.assertEqual(token_gen_mock.check_token.call_count, 1)