New user is not being able to login properly

Issue

• A new user (this also happens to LDAP users) is unable to log-in the first time, but seems to be able to log-in on the second attempt.
  • Steps to reproduce:
    1) Create a guest user from Create Account tab at the sign-in page.
    2) Click on the sign-in button
    3) Type the username and password of the new user and login
    4) The user is redirected to the 'Terms of Use' page where they could approve it and being redirected to the password change UI.
    Expected Behavior: After changing the user's password, the user should be redirected to a password reminder page and login in directly. 
    Observed Behavior: User gets logged out and gets redirected to the sign-in portlet
    Now, when trying to log-in again (second time), the user gets logged in successfully.

Environment

• Liferay DXP 7.2

Resolution

• When the following property in the portal-ext.properties file is set, the portal can behave as observed behavior
  
  • session.enable.phishing.protection=false
• The portal works as expected after commenting or removing this property.

Additional Information

• # Set this to true to invalidate the session when a user logs into the
  # portal. This helps prevent phishing. Set this to false if you need the
  # guest user and the authenticated user to have the same session.
  #
  # Set this to false if the property "company.security.auth.requires.https"
  # is set to true and you want to maintain the same credentials across HTTP
  # and HTTPS sessions.
  #
  session.enable.phishing.protection=true