Fix EZP-20783: csrf field_name breaks ezformtoken

Legacy AJAX custom calls (e.g. ezie) are broken since the field_name doesn't match what ezformtoken expects.

Tested on ezie, where every modification operation ended up with a 500.