making the form <input> extractor more generic (for extracting CSRF stuff from multiple forms)