'Error Changing Password' on password reset screen

Description:

Latest docker rocketchat container (I am locked out and can't find the version number, still have SSH access)

Trying to set a new password during the forgotten-password flow will produce the error message: 'Error Changing Password'

Steps to reproduce:

1. Click forgotten password link, enter email address
2. Check email inbox, click on link in password reset email
3. Redirect to prompt: 'Please enter your new password below"
4. Any text entered in the password field and submitted will produce the error modal saying 'Error Changing Password'

This issue was previously described here: https://github.com/RocketChat/Rocket.Chat.iOS/issues/1891

Expected behavior:

Be able to reset my password and login

Actual behavior:

Video showing the bug: https://www.dropbox.com/s/z4swhrf7rlh4pf2/Video%2006-07-2018%2C%207%2046%2025%20AM.mp4?dl=0

Server Setup Information:

• Version of Rocket.Chat Server: (latest docker version, not sure)
• Operating System: Ubuntu 16.04.4 LTS
• Deployment Method: docker via AWS ECS
• Number of Running Instances: 2
• DB Replicaset Oplog: ?
• NodeJS Version: v6.14.1
• MongoDB Version: v3.4.6

Additional context

I just noticed the rocketchat welcome email in my inbox and I was able to log in, so it seems that the password was indeed reset but still displayed this error message, so this could be more of a UX thing.

Relevant logs:

Console shows this error:

Object { 
  stack: "r@https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:1:4116\n_livedata_result@https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:61:17834\nonMessage

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:61:20170\n_launchConnection/this.socket.onmessage/<

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:2772\nforEachCallback@https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:3967\n_launchConnection/this.socket.onmessage

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:2737\nsockjs-0.3.4.js/u</r.prototype.dispatchEvent

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:6461\nsockjs-0.3.4.js/u</k.prototype._dispatchMessage

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:20106\nsockjs-0.3.4.js/u</k.prototype._didMessage

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:21006\nsockjs-0.3.4.js/u</k.websocket/o.ws.onmessage

  @https://chat.joincircles.net/a94c62f4d33a956efafd9ee2fe8e37a898d7f808.js?meteor_js_resource=true:59:23155\n", 
  isClientSafe: true, 
  error: 403, 
  reason: "Token expired", 
  details: undefined, message: "Token expired [403]", errorType: "Meteor.Error" 
}

Start by reproducing the forgotten-password flow and inspect the password-reset screen alongside the reported “Token expired” console error. Trace whether the reset request succeeds before the error modal appears, and compare valid and expired reset links. Done means a valid reset completes without a false error, while genuinely invalid or expired tokens show an appropriate message.