Handle XHR on reset password #6141

static code 400 not 401