some bug fix

templates/user_lostpass_with_code.html

@@ -22,6 +22,7 @@
       </label>
     </div>
     <div class="text-center">
+      <input type="hidden" name="csrfToken" value="{{ handler.csrfToken }}">
       <input type="submit" value="{{ _('Reset Password') }}" class="inverse rounded primary button">
     </div>
   </form>