user cannot log into a newly created realm

Steps:

1. Set up a new realm, running the onboarding script:
groovy onboard.groovy -d 3 -h http://aq-qa-tomcat1 -l 8080 -p admin -r thesearchagency -rc US -rce jclarke@thesearchagency.com -rcp 1766988789 -rcn 'Reseller Contact Name 9' -rdn "Reseller Display Name 9" -rlang en -rm .3 -rmin 3.50 -rn 'Reseller Name 9' -rp 9727844899 -rr reseller9 -rtz EST -ru http://www.reseller9.com -u admin+tsa@thesearchagency.com

2. Add the new realm to your host file:
198.61.203.70 reseller9.aq-qa-tomcat1

3. Click the link in the email sent to the new user. Link:
http://reseller9.aq-qa-tomcat1:8080/reseller?uuid=31b77990-b472-4007-a791-7d7761b1d264&token=X2CU34D5NWDJU5DIAIQTNSWOS55UR7JVUWV5EK34IWETR6AVTTKLVJJFHTHBZARUQ5L7DQUXR3YK5UOHMXWHEKB6A6BA6BRKSWKJP6X4RPQGK7BCRUDPDSCTJY4YXAHSPJI3PBWEW453JEISB27XGUHAUDGBT7X757YOEXRJRXVUPIDU7YNDZILHKKN7Q5IEWYIAWWS6FYO42XEKQCIBJIMGNQA2DX5E3BZF6RBG3A4PFTQ2CJCIXDTTS32STY6LTAI5LUKWXF33WXS4IOJQ3ZUOBK4RZQS5MZSVQTOKQVDLXNZHHRVRBLRJSAR67HVSBYJMII2BQNCISC5JYGUNSPDKQA======#ACTIVATION

4. Enter a new pw in the UI.

5. UI now brings you to the login screen for the realm. User cannot login with new password

Results:
I get the following Error in the UI:
Your email address and/or password were not recognized

I have attached the tomcat log. The only line I find an issue with is this:
WARN com.thesearchagency.saas.core.services.security.manager.TSASecurityManager [timezone=UTC, principalId=, requestId=fbd6307f-50bd-4594-9285-9747896547a6, locale=en_GB, authToken=null, hostname=70.166.144.17, ipAddress=70.166.144.17] - Missing username 'jclarke@thesearchagency.com' or realm 'null'

Expected Results: User would change the password in the UI, and then be able to login with the new pw.

Here is the user in the db:
mysql> select * from users where email like '%jclarke@thesearchagency.com%'\G

id: 31b77990-b472-4007-a791-7d7761b1d264
realm_id: com.reseller9
type: P
first_name:
last_name:
display: Reseller Contact Name 9
description: Reseller user for Reseller Display Name 9
created_on: 2013-02-27 19:21:59
created_by: c7542d20-f6ba-4784-842b-9202a92190e2
modified_on: 2013-02-27 19:21:59
modified_by: c7542d20-f6ba-4784-842b-9202a92190e2
active: T
password: 1681bef952b139d3f1f1ca2939ed32bbe0cfd74c3ae1f5113109c89ed313b06a1bd95d04cb4773620fc0e9847ba8aa53f99e145d8deaa422b330de8524d3b0b7
salt: 496620796f75206265636f6d6520746f6f20736572696f75732c20796f752077696c6c206c6f736520796f7572207761792e
organization:
language: en
country: US
timezone: EST
gender: M
birthday: NULL
login: 1970-01-01 00:00:00
email: jclarke@thesearchagency.com
homepage:
home_phone:
work_phone: 1766988789
mobile_phone:
1 row in set (0.00 sec)

Here is the log of the onboard script:
[jelliott@aq-qa-tomcat1 groovy]$ groovy onboard.groovy -d 3 -h http://aq-qa-tomcat1 -l 8080 -p admin -r thesearchagency -rc US -rce jclarke@thesearchagency.com -rcp 1766988789 -rcn 'Reseller Contact Name 9' -rdn "Reseller Display Name 9" -rlang en -rm .3 -rmin 3.50 -rn 'Reseller Name 9' -rp 9727844899 -rr reseller9 -rtz EST -ru http://www.reseller9.com -u admin+tsa@thesearchagency.com
DEBUG - Provided Options:
-d: 3
-h: http://aq-qa-tomcat1
-l: 8080
-p: admin
-r: thesearchagency
-rc: US
-rce: jclarke@thesearchagency.com
-rcp: 1766988789
-rcn: Reseller Contact Name 9
-rdn: Reseller Display Name 9
-rlang: en
-rm: .3
-rmin: 3.50
-rn: Reseller Name 9
-rp: 9727844899
-rr: reseller9
-rtz: EST
-ru: http://www.reseller9.com
-u: admin+tsa@thesearchagency.com
DEBUG - http://aq-qa-tomcat1
DEBUG - Base path: http://aq-qa-tomcat1:8080/sapi/rest/
DEBUG - Retrieved session token: X2CU34D5NWDJU5DIAIQTNSWOS55UR7JVUWV5EK7BZCZCRGUQRRYUNZU2SFBTXJYUNLE7FE43EUWVKJ2EX2NTZOFNJC6CN54ZINZF2UVNWCYHA6RL626QMO4UYWTF6LVUOSENUMK4XSHSPCTHZEV32P6O4EETHRF4SMHGGYDPOUVQYSFX2RX27QQN6LLRMIT7OQLUKBAOBA5NLMX6VIQGB4FVVW66AX3F36X3MLQ=
DEBUG - Found 0 resellers for realm[reseller9]
INFO - Successfully created reseller[792fb86d-d7b1-4025-899f-80ad555b4d77]

If I create another realm, with the following, it works as expected. It looks to me, to be an issue with the -rr and/or the -rn flag, as those are the only things I changed.

[jelliott@aq-qa-tomcat1 groovy]$ groovy onboard.groovy -d 3 -h http://aq-qa-tomcat1 -l 8080 -p admin -r thesearchagency -rc US -rce jenniferlclarke@gmail.com -rcp 1766988789 -rcn 'Reseller Contact Name 10' -rdn "Reseller Display Name 10" -rlang en -rm .3 -rmin 3.50 -rn reseller10 -rp 9727844899 -rr reseller10 -rtz EST -ru http://www.reseller10.com -u admin+tsa@thesearchagency.com
DEBUG - Provided Options:
-d: 3
-h: http://aq-qa-tomcat1
-l: 8080
-p: admin
-r: thesearchagency
-rc: US
-rce: jenniferlclarke@gmail.com
-rcp: 1766988789
-rcn: Reseller Contact Name 10
-rdn: Reseller Display Name 10
-rlang: en
-rm: .3
-rmin: 3.50
-rn: reseller10
-rp: 9727844899
-rr: reseller10
-rtz: EST
-ru: http://www.reseller10.com
-u: admin+tsa@thesearchagency.com
DEBUG - http://aq-qa-tomcat1
DEBUG - Base path: http://aq-qa-tomcat1:8080/sapi/rest/
DEBUG - Retrieved session token: X2CU34D5NWDJU5DIAIQTNSWOS55UR7JVUWV5EK7BZCZCRGUQRRYUNZU2SFBTXJYUNLE7FE43EUWVKJ2EX2NTZOFNJC6CN54ZINZF2UVNWCYHA6RL626QMO4UYWTF6LVUOSENUMK4XSHSPCTHZEV32P6O4EETHRF4SMHGGYDPOUVQYSFX2RX27QQN6LLRMIT7OQLUKBAOBA5NLMX6VIQGB4FVVW66AX3F36X3MLQ=
DEBUG - Found 0 resellers for realm[reseller10]

Also, all my user passwords are set to 'Jentest2' if you want to login to any realm.