Fixed case global csrf_protection is set to false

In case you have disable the csrf_protection in the global configuration, the form factory throw an InvalidOptionsException.