Allow password reset link to be used only one time
Currently the password reset link is valid forever. This means, if someone happens to have the email, he/she can reset the password anytime at their will.
We should only allow the password reset link to be used for one time and one time only.