Thanks, will look into what the best path would be. adding to the bugs list :)
replyMarking as fixed, was a prior html change that i overlooked
replyplease have a go but right now it should not matter if you are logged in or not, the reset_token takes precedence.
Thanks for reporting!