Predictable password reset tokens

Reset tokens derived from time, user id, or a fast RNG can be predicted or brute forced within the validity window.