tokenauth_user_reset resets current user always.

Anyone with permission to edit a user account can reset the user's token. This is an important feature. However, the tokenauth_user_reset() function uses the global $uid both to generate the new token, and to determine which database row to update.

Instead, this function needs to access the uid associated with the current form.