adding security hash checking for form session continuity, revising qf_form parameters to use args consistent with form tag attributes