Fix #982 Rename MY_Security to BF_Security

Also:
- added override of csrf_show_error() to improve the error message
- cleaned up the csrf_verify() method to return $this like the original
csrf_verify() method and streamlined the code slightly