Not to allow a used pwd reset token to be reused