one-time login failure

I can't get the one time login links to work - and there are a couple of other people reporting the same problem at http://drupal.org/node/123224

I've output the variables they are:

account->uid:18
timestamp:1175250652
account->login:0
hashed_pass:ecc5f99d4cc116f9e3c146717ac68817 user_pass_rehash:d0c20e11380cd38d93b37d8185d8fbad

Which are definitely not a match!!

Don't know if this problem is connected with

  #66936, #61498: after more testing of the 1-time login URL stuff, i
  realized i was doing it wrong. we need to md5() the temporary password
  *before* we call user_pass_reset_url(), since the code in user.module
  that handles the 1-time login expects the a hash of the hash like this.

as that's the version I have

// $Id: user_status.module,v 1.4.2.5 2007/01/16 01:11:17 dww Exp $
// $Name: DRUPAL-4-7--1-1 $

This is critical as it's stopping moderated signups to the site entirely as the users are totally confused (as am I!)... site due live today so any help anyone can offer gratefully received!