(Backend) Moderators and Administrators can access other users password reset tokens!

[CoenHolten]

This allows reseting someone elses password and taking over their account. Related to https://github.com/CoenHolten/Mobilizon-for-Climate-Justice-for-ALL-living-beings/issues/57