Invalid verification token throws a 200

[mattsbanner]

Description

A HttpException gets thrown with a 200 status code when a user provides an invalid password reset token.

This causes plugins like Sentry SDK to post the error to Sentry.

It feels to me like this should be a BadRequestHttpException where a 400 is thrown, allowing us to ignore it in the plugin config.

Additional info

• Craft version: 3.7.28
• PHP version: 7.4
• Database driver & version: MySQL 5.7
• Plugins & versions: Sentry SDK 1.1.2

[brandonkelly]

This could be a breaking change, so converted it to a discussion.

Related: #8631

[timkelty]

This is fixed in Craft 4.
Thanks, @mattsbanner!