Take, for example, the following scenario. A user requests a password reset, waits a few seconds, refreshes their inbox and ...