Currently, password reset uses the login name/email field as an email field and the password reset link as a submit button. This dual purpose of the login form is not intuitive and can result in confusing error messages.

This PR adds a route for password reset at /login/reset_password, accessible from the reset password link at login/start.

In addition to this, the user experience for users with an expired password has been improved by sending them directly to the password change form. Previously, the redirect sent them to /root/login which just redirected them back to /login/start, dropping the query parameters along the way. This forced them to go through the token-based password reset flow instead of the expired id + current password flow that is already supported on both the frontend and backend.

How to test the changes?

(Select all options that apply)

• I've included appropriate automated tests.
• This is a refactoring of components with existing test coverage.
• Instructions for manual testing are as follows:
  1. Go to the login page
  2. Click on reset password
  3. Enter your email

License

• I agree to license these and all my past contributions to the core galaxy codebase under the MIT license.