       @one {token}, (err, certificate)->
         return callback err  if err
         return callback { message: 'Invalid token.' }  unless certificate
-        
-        { status, expiresAt } = certificate
-
+        {status, expiresAt} = certificate
         if (status isnt 'active') or (expiresAt? and expiresAt < new Date)
           console.warn 'Old-style password reset token is expired', delegate.profile.nickname
           return callback message: """

          if err
            callback err
          else
            messageOptions.requestedAt = certificate.getAt('requestedAt')

            messageOptions.resetPassword = no
            JMail = require './email'
            email = new JMail
              from            : @getPasswordRecoveryEmail()


        JUser.one {username}, (err, user)->
          return callback err or { message: "Unknown user!" }  if err or not user
          certificate.redeem (err)->
            return callback err  if err
            user.changePassword newPassword, (err)->
              return callback err  if err
              JPasswordRecovery.invalidate {username}, (err)->
