User's password is compromised and reset, user completes password update then immediately changes password back to original compromised password.