XE-1284: XWiki.ClassSheet allows guests to bind in memory an XClass to an existing sheet
* Check edit rights and validate the CSRF token.
(cherry picked from commit 075d2c96ebca3c4f58c7a0a8baa5b18ae2a2e857)