createForm method was trying to access getSecurityHandler() from itself, when it should have been using the data object since that object actually has the method, whereas AdminObjectAclManipulator doesn't.
Merge pull request #1574 from jrdnhannah/master

Wrong variable being used, which causes a fatal error.