The "Forgot password" functionality seems to be broken at HEAD. A new user reported being unable to login after clicking on the links in the welcome email. I was able to reproduce with the following steps:
# Go to the login page and click "Forgot password"
# Enter email address and clikc OK.
# Click on the password reset link in the received email.
Upon clicking on the password reset link I am shown an "Unable to Login" dialog. The message says: "The login link you clicked is invalid, out of date, or has already been used."