I received a link from my university that took me to the /setPassword page, yet when I tried to create a password with a quotation mark in it, I saw a non-descriptive alert saying an error occurred ("could not login"), which prevented me from logging in. Looking at the network console, it looks like your JSON validator is messed up and can't handle " in the password (or at very least does a lousy job of communicating invalid input to the user). Please fix!