Forms: errors added to HiddenField are propagated to Form
Forms: removed Environment [Closes #680]
Forms: CSRF protection extracted to standalone control [Closes #865]