Login Password is Not Remembered by System -- Ever

Just to underscore what Pam is pointing to, here is information from a log that I set up to track logins and password resets.



I realize that this may look technical. Essentially, what is happening here is that the system determined that you needed to log in (your prior login had expired), you attempted to login twice and failed to enter the correct password each time, then you requested a password reset *three* times, which would cause three emails to be sent, each with their own own session identifier. However, only the session identifier for the last email sent is recognized, so when you clicked the link in the first email, you probably got an error message.

There may be an opportunity to improve this process. Because we are all sharing the one FTH server, there are days in the week when the emails are not sent from the server as quickly as we may like. It is hard to tell users to wait for a password reset email that might end up up in their spam folder. I cannot really blame people for requesting the password reset multiple times. Perhaps I need to better account for the possibility that users may request a password reset multiple times in a short time frame.