compatibility with zope.formlib's csrfprotection