Invalidate the token after changing the password and email confirmed. #12383

Back