Unskipped tests.
Fixed secure field name for hidden().
Fixed double encoding of form url.
Updated docblocks.
Merge pull request #2867 from ADmad/3.0-formhelper

Update create() and fix secured fields.