This change resets password_expires_at after a successful password
 reset by the user via the “forgot password” mechanism