This is Tuleap 6.3.99.22

We cannot use CSRF token on change_email-complete.php since this script
is a target for a link coming from the unknown (thunderbird, outlook,
...) and therefore cannot send a token challenge.

Change-Id: I3f3c6308c08e3cfeedc7155f6565da6306b1be1e