Reset password is successful, but doesn't redirect the user to the login screen.

For our clients using service desk, they are hitting an issue when trying to reset their password. Here are the steps:

• Customer goes to the login screen.
• Customer clicks on "Forgot Password"
• Customer enters their username.
• Customer receives the email with the rest link.
• Customer clicks the link and goes to the reset password page.
• Customer enters in password, hits submit.

Normally, a user is then redirected to the login page. However, our client users (which have much more limited permissions) just see the password reset page refresh. If they know enough to go to the login page, the new password submission does work. However, to the end user, it appears that nothing happened and they click the submit button a second time. This throws an error "The reset password token you have provided has timed out".

We believe this is a bug, but it could be a simple matter of fixing a permission. Still, we would expect (given the password does reset) that the redirect should proceed.