'lib/htmlform' now reject Get Request by default as that can bypass CSRF protection!