The "Forgot password" functionality seems to be broken at HEAD. A new user reported being unable to login after clicking on the links in the welcome email. I was able to reproduce with the following steps:

1. Go to the login page and click "Forgot password"
2. Enter email address and clikc OK.
3. Click on the password reset link in the received email.

Upon clicking on the password reset link I am shown an "Unable to Login" dialog. The message says: "The login link you clicked is invalid, out of date, or has already been used."