Warn the user when the password reset link is expired

closes #1381 (closed)

Because as it turns out it does expire, it just always looks like it works even though it does not (does not reset the password.)

arkindex/users/serializers.py

@@ -140,8 +140,10 @@ class PasswordResetConfirmSerializer(serializers.Serializer):
 
     def save(self):
         user = self.validated_data["user"]
-        if not user or not self.validated_data["valid_token"]:
+        if not user:
             return
+        if not self.validated_data["valid_token"]:
+            raise serializers.ValidationError({"token": "This password reset link has expired. Please generate a new one using the 'Forgot your password?' link on the Login page."})
         user.set_password(self.validated_data["password"])
         user.save()