The form csrf extension should use the translator if available

Fixes #896