-<dt>Nonce
-<dd>This is just a random string. When you change a password, the server
-checks that the request includes a copy of this nonce, as a protection
-against
-<a href='http://en.wikipedia.org/wiki/Cross-site_request_forgery'><em>cross-site
-request forgery</em></a> attacks.
-