Issue#1158:HPO reindexing should check the CSRF token