Removed user _id from reset route. Use only token value. It's random enough that you don't need to include user id as well.
Removed user _id from reset route. Use only token value. It's random enough that you don't need to include user id as well.

billpull/DoLoCo,billpull/DoLoCo