If you want to have limited-use links that don't cause any writes to the db, then no, you can't with this approach. All it does is use an already necessary db w

If you want to have limited-use links that don't cause any writes to the db, then no, you can't with this approach. All it does is use an already necessary db write, the password change, to avoid adding another one, a token.