dunno the back-story, but I've had some "valid for 5 minutes" password reset emails that would arrive expired (after 6 minutes+). And it didn't seem like the kind of company to do shenanigans, just technical voodoo.