token [day] not set correctly

Thanks to Ralf for spotting this one:

In the password_expire_token_values function, $today is used, but not defined. I'm assuming this should be somewhere in the function:
$today = getdate();