Password recovery fix (CSRF)