BUG: HiddenFields and VisibleFields should always return extraFields

HiddenFields() and VisibleFields() should always return extraFields, e.g. HiddenFields doesn't return SecurityID if it is called before Fields().