Look into possible bug in Password Reset Token Verification

[bretterer]

There may be a bug in the SDK based around a urlencoded token from the password reset workflow.

[bretterer]

It appears there is an issue with the SAuthC1 signer. Further investigation is needed.

To bypass this issue for now, either urldecode() the token, or set your authentication scheme to use the Basic Signer.

 \Stormpath\Client::$authenticationScheme = Stormpath\Stormpath::BASIC_AUTHENTICATION_SCHEME;

// or

$client = $builder->setAuthenticationScheme(Stormpath::BASIC_AUTHENTICATION_SCHEME)
                     ->build();