ResetKey should expire
Probably a good idea to add some sort of expiration to the User.ResetKey
column used for password resets.
We may be able to infer an expiration off of the existing timestamps in the user row; take a closer look at this and determine what is required. We may need to add another column or table for reset key expirations.
Suggested by @klausenbusk
Edited by Kevin Morris