-- One-time links to set a forgotten password: kept by the token's hash, as
-- sessions are, so a copy of the store opens nobody's account. A link is
-- good once, until it expires.
CREATE TABLE password_resets (
  token_hash TEXT PRIMARY KEY,
  user_id    TEXT NOT NULL,
  created_at INTEGER NOT NULL,
  expires_at INTEGER NOT NULL,
  used_at    INTEGER NOT NULL DEFAULT 0
);