A colleague invited to a venue panel gets a link to set their password. That link answered with an invalid token, so invited colleagues could not get in. It now opens the password page, and every link is checked before the mail goes out: a link that would not open is shown as not sent on the staff list instead of reaching anyone's inbox.