Password reset: jwt expired message
When a user uses an expired password reset token they are given the message "jwt expired". This probably needs to be improved to make it meaningful to the user.
e.g. "Your password reset link has expired." or "Your password reset link has expired. Please reset your password again."