Fixed #21322 -- Error message when CSRF cookie is missing

See [ticket 21322](https://code.djangoproject.com/ticket/21322) for rationale.

Thanks to Henrik Levkowetz and olau for their reports and initial patches.