Fixed editprofile.php not correctly validating CSRF token