initial verification link should be invalidated or expired.

Description:

The user is initially sent a verification email, and if they choose to resend the verification email, the first link becomes invalid, and a new email with a new verification link is sent to the user. This ensures that only the most recent verification link is valid for completing the registration process.

Steps to reproduce:

1. When the user requests to resend the verification email, generate a new unique token and update the expiry time.

2. Invalidate the previous token associated with the user.

Expected behavior:

first link becomes invalid, and a new email with a new verification link is sent to the user

Actual behavior:

both link are valid

Server Setup Information:

• Version of Rocket.Chat Server:
• Operating System:
• Deployment Method:
• Number of Running Instances:
• DB Replicaset Oplog:
• NodeJS Version:
• MongoDB Version:

Client Setup Information

• Brave:
• Window 10:

Additional context

Relevant logs:

No files, tests, or entry points are named. Trace the resend-verification flow from the issue description, then verify that resending creates a new token and expiry, invalidates the previous token, and leaves only the newest link usable.