Dial back form_spam_protection to avoid session cookie overflow

Reported by Andrew Stacey

Only protect the edit (and new) forms,
and keep only 25 (instead of 30) keys.
Merge branch 'bzr/golem' of /Users/distler/Sites/code/instiki