One more note:
You will want to ensure you are using the client_id on the URL.
To that end, after discussing with the team, I think your URL's may be broken:
Example good URL --> http://localhost:9011/password/change/<code>?<tenan_id> Example bad URL --> http://localhost:9011/password/change/<code>?client_id=<client_id>&<tenan_id>should be
⬇ ⬇ ⬇
I hope this helps!
Thanks,
Josh