Feature Request: AuthFactorProofTokens single use

**Package**

- auth

**Description / Use Case for a Feature**

We need some way limit the number of AuthFactorProofToken - usages.

Eg.:
A user gets an email with an AuthFactorProofToken to reset his password. At the moment he can reset the password again and again as long as the token is valid.

This is not a huge problem, however we should be able to control this.
