Changelog note on form method limitations

See 14c59be85e9ec53cb2f0b3e9d0d8ce7569d913c6.
Raised by Fara Rustein of Deloitte Argentina (CVE-2013-2653).