Added CSRF attack prevention on password change.