Backporting the auto CSRF protection from 1.1 branch

The CSRF protection added in the PLIP 13679 (https://dev.plone.org/ticket/13679) could be also backported to Plone 4 (Plone need some fix, but it's working).

This fix will make plone.app.imaging working with recent plone.protect without side effects.

remember to sort the imports, this should be at the end