MDL-23692: Forgotpw: better handling of repeats

Explicitly deny repeat reset requests.