Nonce Problem

With TML deactivated, the logout and lost password work as designed. When I activate TML:

• the logout url does not include a nonce, resulting in the “are you sure you want to do this” error.
• the lostpassword function works/fails sporadically. When it fails it’s because of an “invalidkey”

Both WP and TML are up to date. I’ve checked for conflict with other plugins. The site is running on IIS. This problem has existed since launch, so I don’t think it’s specific to the WP version.

Any ideas on how to fix this problem? I love TML and hope to continue using it, but these problems are creating a terrible experience for my users.

https://wordpress.org/plugins/theme-my-login/