Bug 1090427: Backport bug 713926 to bmo/4.2 to protect against csrf for login forms