We have reports of, and have confirmed that there is a security bug in our password reset link that allows you to reset your password more than once with the same link. If you click on the link in the email, and click it again before changing your password, you are taken to the same change password screen, and you can change your password on each page. I'm just at the beginning of my investigation, and was wondering if this is a known issue, or something that I should address directly. Let me know if you need help reproducing.