Move CSRF protection logic to AuraFormTrait

The code is the same in every form. So I move it to AuraFormTrait.