Requires the reset token configured on this deployment (an environment variable your host administrator set) — not your old password.