If you randomly cannot sign into portainer and tried to reset the password, remove your browser's cookies for it.

Huh.

Usually when I run into that I just bounce the Portainer container and it sorts shit out.

Maybe that's actually causing the tokens to rotate/expire and thus doing the same shit?