What is the challenge?
compliance with information security policy
What is the impact?
Describe your idea
prevent users from using an old password when resetting their password