fix clash on conflict when re-sending a reset token

[jerebenitez]

Since the target for onConflictDoUpdate on createPasswordResetToken was set to resetToken.id instead of resetToken.userId, if I clicked twice on "Send Reset Email" it would throw an "Duplicate key value violates unique constraints" error instead of refreshing the token in the db.

[webdevcody]

thanks for the fix!