Optional CSRF protection for zope.formlib. There're a few issues
still to discuss.