Plug in any gibberish username and password (and the captcha if it requests it). When you're told that you've made an error inputting your password, the link text "Have you forgotten your password?" goes to https://user/password , and I'm pretty sure that's not correct lol.
I'm suggesting to use gibberish out of convenience of testing but it will do the same thing even if you use your real account username; just make sure it's a username with an incorrect password. And yes I know, "duh?", but I'm just being thorough.
Just clarifying that this only applies to the link in the red box that appears after failing a login. The blue link below the password box works correctly.