Is it possible to verify the token and tokenid before changing a user’s password or rendering the reset password screen?