Reset Password Token on password update

Restrict owner from changing password multiple times with the same
password token as security measure. Reset the token once the password
has been updated.

Updated test after successful password reset.
- test if the password token is empty
- test if a new attempt to update password with the same token prompts the error