Check Password Reset Token

Is this reset link still usable? Lets the console say "this link expired" before the user types a new password, rather than after. Returns only a boolean — an unknown token and an expired one are indistinguishable, so this reveals nothing an attacker holding the token doesn't already have.