add honeypot

Prevent automated POST (actually non-GET) requests by checking a form attribute set by JavaScript, in the hope that spammers will not execute JavaScript.

Usage:

  - Include `/honeypot.mak` in the form to be protected
  - Use `warp.helpers.honeypot` as a decorator of the renderer that the form posts to