I've got this problem where once in a while, when a user uses the one time password link, instead of going to the password reset page, it takes them to the home page. Whenever this happens, in the error log I see this:
Path: /user/reset/[user ID]. Drupal\Core\Http\Exception\CacheableAccessDeniedHttpException: This route can only be accessed by anonymous users. in Drupal\Core\Routing\AccessAwareRouter->checkAccess() (line 118 of /var/www/html/web/core/lib/Drupal/Core/Routing/AccessAwareRouter.php).
I've found answers to why this can happen, but I haven't found an answer for why it happens sometimes. Do you have any suggestion on how to resolve it? Would it be a bad thing to make the form available to authenticated users?