changed FormHelper::secure() and FormHelper::end() to support attributes...

... in the hidden CSRF-protection tags that are being generated for SecurityComponent to allow specification of additional html attributes like HTML5s "form" attribute. This allows separation of Form instantiation/controls and form data - for instance within html tables

improved tests for testing against additional attributes for Form::secure()

improved tests for testing against additional attributes for Form::end()

removed array cast, fixed test

fixed docblock format

format


--



Adds secureAttributes that are passed into the hidden input fields to enable support for html5 attribute "form" and similar.

This, for instance, allows, the seperation of HTML form controls/instantiation and html input fields into tables while not breaking Cake's SecurityComponent.

Target: 2.5, Rebased, hope this is now all correct, sorry for the trouble.