Merchant/Reseller can't reset the password

Steps:

1.Open reseller login page.

2.Click on Forgot password link and enter valid email address - Email sent

3. Enter valid passwords and click SUBMIT

Actual Result:

While resetting the password, it shows Error message,"Unfortunately we were unable to process your activation request at this time.
Error Code: 403" Please see the attached screenshot.

Tomcat log:

014-10-28 10:41:25,275-98975622 [http-8080-10] INFO org.apache.cxf.interceptor.LoggingInInterceptor [] - Inbound Message
----------------------------
ID: 2400
Address: http://127.0.0.1:8080/sapi/rest/users/Test123/password
Encoding: UTF-8
Http-Method: PUT
Content-Type: text/plain; charset=utf-8
Headers:

{Accept=[application/json, text/plain], connection=[Keep-Alive], content-encoding=[UTF-8], Content-Length=[416], content-type=[text/plain; charset=utf-8], host=[127.0.0.1:8080], user-agent=[Apache-HttpClient/4.2.1 (java 1.5)], x-tsa-authenticate=[298585fb-9aad-492b-9b7e-091a06a78928]}

Payload: C25ND5EHIQTOQSHYMFSIOQ5R2QEA2SCSO4RB5ULSZ4YS4FI4ATSAPGJB2TCMKLTHACS7KDERHFQZHA36MKP7RKPH6RAHGJCNE7G4QUOTE6UOMQ2ITCA2C5A2AFCM7VC54YN7JT7JKBYCPLNESIWRLKCIRFCUNJVILFYTLHQNKANMDLFJBU4RKJXIY37K4UWN6HXKM72JSZIZI77N45ZKLTQZHTPVQ5KE2SMKV5Q27OSRKCTIB2EP5Q3X6KRX3TSJ5SJO63NGA4PIE27L4LKRPSG5IIBA53YJDZ533T5F6SYDKU6BS6DCMPYYWN2EKU3ELPF2XTN72NPUZRZILEAPMQARGIZE4CH5Z3F6RH5CGVLKUXOPEBRQFCLFR6YMNP6ZPQHPP7UVOBOYYTUBYXIG6RT2FI======
--------------------------------------
2014-10-28 10:41:25,283-98975630 [http-8080-10] ERROR com.thesearchagency.security.TokenizedSecurityContext [timezone=Etc/UTC, requestId=2fd371d1-9ca4-4433-ba70-c959cbabcecf, locale=en_US, authToken=298585fb-9aad-492b-9b7e-091a06a78928, hostname=127.0.0.1, ipAddress=127.0.0.1] - Exception thrown in demarshall()
java.io.EOFException: null
at java.io.DataInputStream.readUnsignedShort(DataInputStream.java:340) ~[na:1.6.0_30]
at java.io.DataInputStream.readUTF(DataInputStream.java:589) ~[na:1.6.0_30]
at java.io.DataInputStream.readUTF(DataInputStream.java:564) ~[na:1.6.0_30]
at com.thesearchagency.security.TokenizedSecurityUtils.decode(TokenizedSecurityUtils.java:143) ~[tsa-security-2.2.2.jar:2.2.2]
at com.thesearchagency.security.TokenizedSecurityContext.demarshall(TokenizedSecurityContext.java:200) ~[tsa-security-2.2.2.jar:2.2.2]
at com.thesearchagency.services.commons.cxf.RequestLoggingFilter.getPrincipalId(RequestLoggingFilter.java:90) ~[aml-service-commons-2.2.6.jar:2.2.6]
at com.thesearchagency.services.commons.cxf.RequestLoggingFilter.filter(RequestLoggingFilter.java:58) ~[aml-service-commons-2.2.6.jar:2.2.6]
at org.apache.cxf.jaxrs.utils.JAXRSUtils.runContainerRequestFilters(JAXRSUtils.java:1645) ~[cxf-rt-frontend-jaxrs-2.7.5.jar:2.7.5]
at org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.processRequest(JAXRSInInterceptor.java:230) ~[cxf-rt-frontend-jaxrs-2.7.5.jar:2.7.5

.
.
.
2014-10-28 10:41:25,288-98975635 [http-8080-10] ERROR org.apache.cxf.jaxrs.utils.InjectionUtils [timezone=Etc/UTC, principalId=, requestId=2fd371d1-9ca4-4433-ba70-c959cbabcecf, locale=en_US, authToken=298585fb-9aad-492b-9b7e-091a06a78928, hostname=127.0.0.1, ipAddress=127.0.0.1] - Instance of class java.util.UUID can not be created using static valueOf(String) or fromString(String) methods
2014-10-28 10:41:25,290-98975637 [http-8080-10] WARN org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper [timezone=Etc/UTC, principalId=, requestId=2fd371d1-9ca4-4433-ba70-c959cbabcecf, locale=en_US, authToken=298585fb-9aad-492b-9b7e-091a06a78928, hostname=127.0.0.1, ipAddress=127.0.0.1] - javax.ws.rs.WebApplicationException: java.lang.IllegalArgumentException: Invalid UUID string: Test123
at org.apache.cxf.jaxrs.utils.InjectionUtils.evaluateFactoryMethod(InjectionUtils.java:459)
at org.apache.cxf.jaxrs.utils.InjectionUtils.handleParameter(InjectionUtils.java:377)
at org.apache.cxf.jaxrs.utils.InjectionUtils.createParameterObject(InjectionUtils.java:859)
at org.apache.cxf.jaxrs.utils.JAXRSUtils.readFromUriParam(JAXRSUtils.java:1133)
at org.apache.cxf.jaxrs.utils.JAXRSUtils.createHttpParameterValue(JAXRSUtils.java:825)
at org.apache.cxf.jaxrs.utils.JAXRSUtils.processParameter(JAXRSUtils.java:800)

Expected Log:

Merchant/Reseller should reset the password successfully.