A password reset link can be reused after a successful reset. Which design improvement directly fixes the demonstrated weakness?

1. Only increase the website's font size
2. Require a longer display name
3. Invalidate the reset token after use and enforce an appropriate expiry
4. Store the reusable token in another public URL