SECURITY: Add CSRF token on Special:ChangePassword