- Reset password
- Log in with it, this yields the "Create a new password" screen, courtesy of Special:ResetPassword proxied through SpecialUserLogin
- Trigger any error or callback or rate limit. That will respond from ResetPassword (in the url) as that's where the form submits to.
It shows exact same form again, with my values still filled. Except now the form looks completely unstyled.