merge fields and blacklist

rather than have an explicit blacklist - blacklist a field by
specifying it as false in $fields
test corrections
add a test that the "blacklist" does something
Merge pull request #3436 from AD7six/3.0-form-inputs-blacklist

RFC: merge blacklist and fields for Form::inputs