KemalIdentity::Accounts::ActionRejected

The link did not work, or the new password was not acceptable.

Unlike a failed login, this is safe to render specifically. The person holding a reset link already has it; telling them their new password is too short reveals nothing about who exists, and refusing without saying why makes the form unusable.