Fixes XSRF vulnerabilities in password page, admin pages, and GoogleApps pages.