Added CSRF protection

Added utility module EPrints::Cookie, for setting and parsing cookies for the
correct domain.

Screen::render_form() now sets a CSRF token for POST forms.

Screen::from() now checks that the CSRF form parameter and cookie match before
allowing actions.

Done some tidy-up of render_form() in Screen plugins.
Merge branch 'csrf'