the Lost Password? link below the login form goes to the wrong URL.
then if you try to log in unsuccessfully, the error returns above the login form with the correct URL for Forgot Password (the one below the login form persists with the WRONG one).
clicking on the correct Forgot Password link brings up the email field, and filling it out returns the login form again.
problem is that no password recovery email is sent.