Incomplete links stop here
The reset page requires a token before it will accept a new password.

Secure recovery
The reset page keeps the recovery step narrow: validate the link, choose the new password, and send the user back to login without exposing client data.
The reset page requires a token before it will accept a new password.
The form requires at least eight characters before the reset can be submitted.
After a successful reset, SIRJ sends the user back to login with a clear confirmation notice.
This reset link is missing its token. Request a fresh link before choosing a new password.
Password reset links must include a one-time token. Use the recovery page to send a new link to the account email.