Fix EZP-20289 Symfony CSRF protection not integrated with legacy

This is the legacy side of things, Symfony aligninment on how csrf is dealt with.
Fix EZP-20289 Add bc note on eZFormToken CSRF protection changes
Merge pull request #552 from ezsystems/sf_csrf_align

Fix EZP-20289 Symfony CSRF protection not integrated with legacy