On setting new password page we have:
Change of password
Complete the required fields to make the password change
two fileds for entering passwords
and Change password button.
When clicked change password button there is made GET connection to /login page without sending any params.
It can't work. 100% it is broken.