basic CSRF protection added to Security/Form, now Form Class has to be finished