secure password-reset form against possible header-modification, thx to Hendrik

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>