I have limited dev cycles, and would prefer to work on my product rather than google "how long does password reset token need to be" and writing auth forms.