Password Reset Fails

[blakenan-bellese]

Describe the bug
Two users at the City's Health Department tried to use the reset password page but were not sucessful.

To Reproduce
Steps to reproduce the behavior:

1. Request a password reset
2. Click on "Reset My Password" button in email
3. Enter new password and click "Reset Password" button

Actual Behavior
A "Sending..." message appears below the "reset Password" button for a few seconds then disappears. the user is left on the Reset Password page and their password is NOT changed.

Expected behavior
Reset password dialog is closed and user is navigated to login page.

Environment
This has been reproduced in both IE and Chrome and on Mac and Windows.

Additional context
Here's a few console errors exported from misbehaving browser

Here's a screen shot of same errors in log above.

Here's what the user sees.

[blakenan-bellese]

It seems that the front end might not be handling an error properly. Not sure if the backend is behaving well. I tried updating my password directly via API on my local instance. I did a PUT /user to update my password then login with that new password in the front end. I got a 200 on the PUT but the subsequent login failed.

Here's the payload I used to update my password:

{
"email": "blakenan@yahoo.com",
"password": "GagaYada217!"
}

Here's what the API reported in the console:
PUT /user 200 11.553 ms - 26
OPTIONS /user/login 204 0.096 ms - 0
POST /user/login 403 10.300 ms - 9