This query comes in 2 scenarios when the user changes the token from the URL then this issue appears. Secondly, when the user has received the link to change password, but the link is used after few hours/days.