oothJwt and reset password

[dfliess]

When using ooth-jwt and tokenLocation: 'both' or 'body' reset password from ooth-local breaks as send a token in the body and ooth-jwt tries to parse it and says jwt malformed.

For now I have ended using tokenLocation: 'header'.
When fixing this I would suggest to also think in accepting an array of extractors http://www.passportjs.org/packages/passport-jwt/#extracting-the-jwt-from-the-request instead of that string. So that anyone can add for example fromUrlQueryParameter