Change password reset token when reset link is followed

This means that a password reset token will be changed within seconds of being logged. That does mean that the links in emails will only work once, so copy changes should follow to explain that.