Reset Password Token on password update

Restrict owner from changing password multiple times with the same
password token as security measure. Reset the token once the password
has been updated.
Closes #1546