Fixed CSRF protection for new password form