Making visibility of Form#addRow public.
Adding csrf protection, incorporating glynnforrest/blockade.
Updating CsrfListener to actually set the value on the Form.