Hello,
i wanted to report the following:
Password reset links stay valid after use, for days.
Since town of salem has a history of well, handling data not very safely (looking back at the data breach), I thought of reporting the issue before this becomes an actual known thing.
Password reset links should never stay valid after use or a longer period of time.
Please fix the issue, before it gets abused.