MDL-68178 auth: CSRF protection for the resend confirmation email form