extend new member token expiration

The URL sent to new members to set their login and password expires after 48h, as the system is the same used for password reset. I think password reset tokens are good to expire after 48h, but new members should have at least a week to use the link.