Add missing CSRF token.

- Resolves VUFIND-1179

themes/bootstrap3/templates/myresearch/newpassword.phtml

@@ -20,6 +20,7 @@
   <div class="error"><?=$this->transEsc('recovery_user_not_found') ?></div>
 <? else: ?>
   <form id="newpassword" class="form-horizontal" action="<?=$this->url('myresearch-newpassword') ?>" method="post" data-toggle="validator" role="form">
+    <input type="hidden" value="<?=$this->escapeHtmlAttr($this->auth()->getManager()->getCsrfHash(true))?>" name="csrf"/>
     <input type="hidden" value="<?=$this->escapeHtmlAttr($this->hash) ?>" name="hash"/>
     <input type="hidden" value="<?=$this->escapeHtmlAttr($this->username) ?>" name="username"/>
     <input type="hidden" value="<?=$this->escapeHtmlAttr($this->auth_method) ?>" name="auth_method"/>

themes/jquerymobile/templates/myresearch/newpassword.phtml

@@ -20,6 +20,7 @@
     <? else: ?>
       <form data-ajax="false" action="<?=$this->url('myresearch-newpassword') ?>" method="post">
         <?=$this->auth()->getNewPasswordForm() ?>
+        <input type="hidden" value="<?=$this->escapeHtmlAttr($this->auth()->getManager()->getCsrfHash(true))?>" name="csrf"/>
         <input type="hidden" value="<?=$this->escapeHtmlAttr($this->hash) ?>" name="hash"/>
         <input type="hidden" value="<?=$this->escapeHtmlAttr($this->username) ?>" name="username"/>
         <input type="hidden" value="<?=$this->escapeHtmlAttr($this->auth_method) ?>" name="auth_method"/>