[Tested policy : Cannot-contain-others]
When entering an invalid password in the Password Reset form, a Policy Failure is displayed, with no other option than returning to the login page, or "Try Resetting Your Password Again".
This is an un-sastifactory user experience because :
- The reason for the policy failure is not displayed, leaving the user clueless as to which correction needs to be made
- There is no other way to retry other than requesting a Password Reset again, or (workaround) load again the same link sent via email.
- The reset form should be presented again
- The reason for the policy failure should be displayed (for example "can not contain others" )