SSPR gives error when logging in to change password with NAM 4.2SP1

When any user logs into SSPR (normally NAM redirects the user there because their password expires) they get this error message on browser:

Error - SSPR 5034 The browser session is invalid or has expired. Please try again. { 5034 ERROR_INVALID_FORMID }

Upgraded appliance to 4.1 and NAM to 4.2SP2 or newer

Also browser can throw this as well:

HTTP 500

An error has occurred. If this error occurs repeatedly please contact your helpdesk.

javax.servlet.ServletException: javax.servlet.ServletException: Filter execution threw an exceptionpassword.pwm.http.filter.SessionFilter.processFilter(SessionFilter.java:102)password.pwm.http.filter.AbstractPwmFilter.doFilter(AbstractPwmFilter.java:62)org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)