I'm having this strange problem. After submitting a request for a new password I get both "new password sent" and "CSRF error" messages.
Then I receive a "Password Reset Request" email from the system. Clicking the link in this email result in two further email titles "Your New Password for ..." with different passwords. I just cannot work out why this is happening. Any help would be awesome!
This is the site in question: http://www.lifecafe.me/