Currently the forgot password flow uses a 5 minute timeout, this is too short for some customers. Add a setting to make this adjustable