its better to make Lost password's link with css, or javascript. so it will not redirect to http://www.domain.com/login?action=lostpassword&redirect_to=http://www.domain.com but the form of Lost Password will keep staying on the page. Because somewebsite it's securing their backend or admin login with Better Security Plugin. I hope there will be a solution :)