The function `verify_password_reset_token` is not defined, but used in `validate_email` endpoint. Is this endpoint not needed anymore through the new auth scheme?