anti-CSRF in 'lib/htmlform' now uses the cache system for the sake of scalability!