This happened to me yesterday. Turned out that the site had a password length limit on the reset-password-form, but not on the login page.