handle double render error when password token is invalid