Always try to get csrf on: 1.Change Password function. 2.Email change 3.Change Security Question Author @Virdoex_hunter