Fix the format of csrfguard.tld to be valid against the XSD

The TLD isn't XML valid:
* the xsi:schemaLocation value must be a a list of 'ns uri' pairs,
*  some elements in the TLD aren't well formed. For example, short-name must be a token and not a sequence of several words and the body-content element is mandatory in the tag element.

By fixing the TLD, CSRFGuard can now be used in applications running in strict-JEE servers (like JBoss 6 AS for example)