Add CSRF token to reflection reset button