When the password reset form is used, the validation URL that is emailed to the user is not properly encoded. A valid email address may contain characters that need to be encoded, particularly '+'.
Thanks for pointing this out! I found the problem and updated the code. Tested with and without + in email and all looks to be working now. Please try the reset again and let us know if you continue to have problems.