List of steps to reproduce

• Cresate a new WME account
• Wait a day o so before setting up the account by following the url provided on the welcome email.
• Attempt to change password for the first time

What happens?:

The application won´t let you log (¨invalid credentials¨) in and if you attempt to reset your password, the application fails silently and never sends the forgot password email.

What should have happened instead?:

The application should warn users that their temporary password is valid ONLY for a certain amount of time and hopefully show for how long.

If a user attempts to user an expired temporary password, the application should make it clear why the user cannot log in and ideally provide instructions on how to proceed.

If a user with an expired temporary password attempts to use the Forgot Password feature, the application should send the forgot password email or at the very least let the user know the reason why they can´t change their password.

Software version (if not a Wikimedia wiki), browser information, screenshots, other information, etc.: