Add a setting for the timeout in the forgot password workflow

Currently the forgot password flow uses a 5 minute timeout, this is too short for some customers.
Add a setting to make this adjustable