Optionally backporting CSRF protection on Plone 4

The CSRF protection added in the PLIP 13679 (https://dev.plone.org/ticket/13679) could be also backported to Plone 4 (Plone need some fix, but it's working).

This fix will make plone.app.imaging working with recent plone.protect without side effects.