Lock out doesn't seem to be the problem. I am able to sign in then change the password and after the first attempt it doesn't let me use the new hashed password from the email message.

The book hasn't been very helpful at all on this subject. There needs to be a troubleshooting section for people like me that will have some kind of problem with it.