Demonstration of a problem in Play 2.2.1's CSRF implementation