Hi!

I downloaded the latest stable version of mantis.
Unzipped, and installed, renamed the admin dir.

Logged in with administrator, and created a user: myuser.
Logged out.

System sent me a mail with an url to set my pass.
After i wrote in the pass i've got this message:

APPLICATION ERROR #2800

Invalid form security token. Did you submit the form twice by accident?

Please use the "Back" button in your web browser to return to the previous page. There you can correct whatever problems were identified in this error or select another action. You can also click an option from the menu bar to go directly to a new section.

but it logged me in. but if i logout, and then try to log in again, i can not login. my user is active but not protected.

if i tried to reset the pass of this myuser, the same thing happens.