revoke password change token after successful change
ensure admin users can only use reset token once
Merge pull request #136 from apigee/USERGRID-1243

Usergrid 1243