While resetting AD account through email token its by passing to check the old password (3 replies)

I am seeing an issue please help ...

We are using send token method , but why resetting password through link its accepting my old password as well could you please help how to avoid this and see last 5 old passwords or leave the password polices to check with AD only ...