mozilla/olympia — pull request #378 by davidbgk (2014-12-01 15:02:31+00:00)
Title: Add the anonymous CSRF token on password reset (bug 1069546)

This fix potentially introduces a security flaw so I need double check prior merging :)