added UserInputWatchSniff
removed token .
Added Threshold for $form and $form_state possible user input with UserInputWatchSniff