Fixed issue #08564: CSRF in third_party KCFinder (version 2.51)
Dev: Inserted hidden CSRF input in upload form