Ideally a user should use the reset link as soon as they receive the password reset email.
The password reset link is only good for 60 minutes.
If a user has not reset their password within one hour, they must click on Reset Password again from the initial login page.
