I’ve experienced the same issue with the password reset tool. In fact, it seem to work about 50% of the time – as follows:
User story: user requests to reset the password —> email with a password reset link sent and received —> user clicks the link, is taken to a password reset page, and is asked to provide a new password —> then one of the following happens:
(a) password is reset successfully (about 50% of the time) OR
(b) “invalid password reset link” message is shown (also about 50%).
I’ve run a number of tests to confirm the above using a number of accounts, different machines and IP addresses. I’ve also tried d activate into the remaining plugins one by one and all together. The issue persists.
Any insight would be much appreciated.
