I am in a pickle now, about to release a Wordpress-based app and I can't get the registration complete because password set/reset key is sometimes invalid.
I say sometimes because when the user is registered, he gets link to set the password, and that is always invalid. Then he is asked to enter his username to reset the password and a new email is sent. That link is also invalid, however, if he requests a new password reset email again, then the link is valid.
The problem seems to be the key generated. When they key is clean of symbols, it works, example:
When the key is with symbols, it gets denied, example:
I disabled all plugins and it acts the same way. No caching plugins installed.
What could be happening here? Please help!
I repĺicated this behavior again to make sure, and this time it took 4 tries. So I am guessing that if you keep trying to get a clean key, it works. Why would this be happening?