Forgotten Password: New password sent and re-entered, but then reports email/password error (even though they do log in)., Session ID issue?

[Cheepnis]

Hi folks,

I have searched high and low for the solution to this, but haven't found the answer :'(

 

When a user selects "forgotten password" and is sent a new password, they receive it OK, and the screen then reports that a new email has been sent. However, when they enter the new password again at that very same screen, they get:

 

 

Error: No match for E-Mail Address and/or Password.

 

 

... even though they actually sucessfully log in after they enter it. The error message makes the user think they haven't been logged in and they get frustrated and send me nasty letters. :o

 

However, if they leave the store at any time after requesting the new password and then try again to log in, everything works fine.

 

This looks to me like a session ID or cookie issue. Shouldn't the store kill the session immediatly after the user requests the new password? Is this a bug or have I done something to screw things up and now need to fix it?

 

Thanks for any help!!