Password recovery guard time is too short

Your password recovery email takes too long to arrive in my inbox.

```
Return-path:
Envelope-to: matthias@urlichs.de
Delivery-date: Sun, 03 Jul 2016 13:54:05 +0000
Received: from a8-176.smtp-out.amazonses.com ([54.240.8.176])
by netz.extern.smurf.noris.de with esmtps (TLS1.0:ECDHE_RSA_AES_128_CBC_SHA1:128)
(Exim 4.87)
(envelope-from )
id 1bJhpv-0003s1-J6
for matthias@urlichs.de; Sun, 03 Jul 2016 13:53:37 +0000
From: "Keybase.io"
To: matthias@urlichs.de
Subject: Reset Your Password
Date: Sun, 3 Jul 2016 13:35:25 +0000

```

By the time I actually manage to check my Inbox, it has expired.

```
Your authentication token was corrupted in transit; please try again.
(Failed MAC check: Error: for uid REDACTED,matthias@urlichs.de: Expired 425s ago)

```

Please extend that timeout to at least an hour.
##

-- Matthias Urlichs

The issue mentions the password recovery flow and an authentication-token expiry error, but names no files or tests. Start by locating the password recovery token creation and expiration handling, then verify the timeout is at least one hour and test that a delayed recovery email remains usable.

Written by the indexing model from the issue text.