Merge branch 'develop' into feature/forgot-password-link

Author: longrunningprocess

themes/material/core/loginuserpass.php

@@ -3,6 +3,7 @@
     $siteKey = $this->data['recaptcha.siteKey'] ?? null;
     $username = $this->data['username'] ?? null;
     $forgotPasswordUrl = $this->data['forgotPasswordUrl'] ?? null;
+    $csrfToken = $this->data['csrfToken'] ?? null;
 
     $errorCode = $this->data['errorcode'] ?? null;
     $errorMessageKey = $this->data['errorparams'][1] ?? '{material:login:error_wronguserpass}';
@@ -55,6 +56,7 @@ function onRecaptchaLoad() {
 
             <input type="hidden" name="AuthState" 
                    value="<?= htmlspecialchars($this->data['stateparams']['AuthState']) ?>" />
+            <input type="hidden" name="csrf-token" value="<?= htmlentities($csrfToken); ?>" />
 
             <div class="mdl-textfield mdl-js-textfield mdl-textfield--floating-label">
                 <label for="username" class="mdl-textfield__label">