Problem/Motivation
While reviewed patch #2473875-75: Convert uses of $_SESSION to symfony session retrieved from the request\Drupal\user\AccountForm using pass-reset-token from request instead of query string
Proposed resolution
Consume pass-reset-token from query string
Remaining tasks
- patch and add tests for token (may need CR
- review/commit
User interface changes
no
API changes
no
Data model changes
no