7 Ways to Prevent Privilege Escalation via Password Resets