Add separate production, testserver, and demo deployments

internal/api/tokens.go

@@ -83,6 +83,10 @@ func (app *application) createPasswordResetTokenHandler(w http.ResponseWriter, r
 		app.failedValidationResponse(w, r, v.Errors)
 		return
 	}
+	if app.isProtectedDemoAccount(input.Email) {
+		app.demoAccountProtectedResponse(w, r)
+		return
+	}
 
 	user, err := app.models.Users.GetByEmail(input.Email)
 	if err != nil {