User.findById(req.forgotPasswordUid)
                    .then((usr) => {
                        user = usr;
                        return user.validateToken(req.forgotPasswordToken, 'password');
                    })