feat: correct routing and persist params

app/controllers/auth/passwords_controller.rb

@@ -46,8 +46,9 @@ class Auth::PasswordsController < Devise::PasswordsController
       end
       respond_with resource, location: after_resetting_password_path_for(resource)
     else
-      set_minimum_password_length
-      respond_with resource, status: :unprocessable_entity
+      @minimum_password_length = Devise.password_length.min
+      @confirmation = resource_params["confirmation"]
+      render "devise/passwords/reset_password", status: :unprocessable_entity
     end
   end
 

app/views/devise/passwords/reset_password.html.erb

@@ -1,8 +1,4 @@
-<% content_for :title, @confirmation ? I18n.t("user.create_password") : I18n.t("user.reset_password") %>
-
-<% content_for :before_content do %>
-  <%= govuk_back_link(href: :back) %>
-<% end %>
+<% content_for :title, @confirmation.present? ? I18n.t("user.create_password") : I18n.t("user.reset_password") %>
 
 <%= form_for(resource, as: resource_name, url: password_path(resource_name), html: { method: :put }) do |f| %>
   <%= f.hidden_field :reset_password_token %>
@@ -22,6 +18,8 @@
       <%= f.govuk_password_field :password_confirmation,
         label: { text: "Confirm new password" } %>
 
+      <%= f.hidden_field :confirmation, value: @confirmation %>
+
       <%= f.govuk_submit "Update" %>
     </div>
   </div>