I found the issue: my password was only alphanumeric but when I added a special character it worked.

So the bug is simply missing feedback about what kind of password is required.