Prevent infinit password change by settin password_expires_at to nil

app/controllers/passwords_controller.rb

@@ -19,7 +19,8 @@ class PasswordsController < ApplicationController
     )
 
     if result
-      redirect_to root_path(notice: 'Password successfully changed')
+      @user.update_attributes(password_expires_at: nil)
+      redirect_to root_path, notice: 'Password successfully changed'
     else
       render :new
     end