- prevents exploit of another user entering incorrect password for email yet passing validation using existing token mentioned in #146
- does not protect against same user entering wrong password (I can live with this.)
Periodic task to remove invalid token every 2 hours
I forgot to adjust the class names in admin.py after changing the first
characters to caps.
There was also a little shuffling of code to make the definitions work.
