SECURITY: SpecialWatchlist: Check CSRF token when using "Mark all pages visited"