Change "private static" --> "protected static" (80 places).
Change "private function" --> "protected function" (51 places).
Change "private $" --> "protected $" (42 places).
Revise comments in Controller_Auth_Test to reflect private/protected changes.
Fix bug in Formo overload that adds CSRF.  Works like a charm now!
Merge pull request #321 from shadlaws/private_protected_and_formo

Private protected and formo