Reset password policy isn't consistent with registration / change password policy.

Summary

The security researcher identified that the password policy on the reset password page wasn't consistent with the policy set forth on the registration and change password pages. The minimum characters, on the reset password page, was only for 6 characters whereas the other pages require a minimum password length of 8 characters.