Make our anti CSRF logic being a form element

refs #5525