CSRF Protection Activate!

What I think is a sufficient level of CSRF protection has been added

It can be activated like so:

     form.add( new WhatTheForms.CSRFField() )

(And you need ExpressJS’s signed cookies activated)