The user is able to click on "Reset Password" and give his/her Username and Email to get a "password-reset-confirm link" in his/her email, however, upon using the link and providing the same old password, it gives the "password reset complete" page. Also, there is no ask for "confirm new password" in the reset page, unlike expected
Don't think this is much of a concern from a user perspective. Treating this as a low priority issue and if time pertains in the future, can work on this.
The user is able to click on "Reset Password" and give his/her Username and Email to get a "password-reset-confirm link" in his/her email, however, upon using the link and providing the same old password, it gives the "password reset complete" page. Also, there is no ask for "confirm new password" in the reset page, unlike expected