[FrameworkBundle] Add csrf_protection configuration to forms
[FrameworkBundle] Test that form csrf needs csrf_protection enabled
[FrameworkBundle] Test that csrf_protection can be disabled for forms
[FrameworkBundle] Add form csrf-protection attribute to xsd