### **Environment**:

Your OpenProject Version: 10.3 deb / docker Begin of the insertion/ devEnd of the insertion

Operating System / Browser / Language: Chrome

### **Steps to reproduce:**

1. Create new installation Begin of the insertion/ seed empty DBEnd of the insertion
2. Begin of the insertionEnsure force\_password\_change is active in admin seeder (for dev mode, this is not the default)
3. End of the insertion Login as admin
Begin of the insertion4.End of the insertion Begin of the deletion 3.End of the deletion Change password

### **Actual Behavior**

You're seeing 404 because `flash[:_password_change_user_id]` is missing. This is due to a CSS highlighting request to a controller that triggers flash cleanup.

This does not always happen due to different caching rules for browsers.

### **Expected Behavior**

Password changed.