When I enter my new password and submit the page, it responds with a message about the username 'philip', but my username is 'philip widan'. There was a similar issue with the Bonfire plugin, which required an upgrade to JIRA v5 to resolve.

The URL I clicked on to get to the password reset page was:
http://SERVERNAME:8090/resetuserpassword.action?username=philip+widan&token=debb85d3888f162558b971781159e0c3570a6472