Reset Password Token on password update

Restrict owner from changing password multiple times with the same
password token.