Test that creating a new forgot password request invalidates older requests.