Normally at /Security/login you’d expect to find the login form.

On a site I’m trying to log into right now, somehow that page is actually a password reset form.

If you fill it in and submit it, it works and you get the password reset email — but the link in the email also goes to a password form too! So it seems like it’s impossible to log in.

I have a local copy of the site checked out and the login form works as expected (sadly no local copy of the database…).

This is the first time I’ve tried to log into the remote copy of the site, so it’s possible that it’s always been like this due to something in the way the server is configured. But I don’t know where to start looking for the reason this is happening.

Any ideas?