Don't present the password reset form if token is invalid