tests: added test for HiddenField persistent value
CsrfProtection: ignores setValue(), is not erased by Form::setValues() [Closes #39][Closes #40]