The following can cause the link to go to the first step:
- Expired link: The reset link expires two hours after it is issued.
- Single attempt limit: For security, only the first attempt/click on the link allows password reset. Additional attempts will make the user to start over. So double-click on the link will cause the redirection as well.