Add the anonymous CSRF token on password reset (bug 1069546)