Forms: the CSRF token is protected against BREACH attack (BC break)
Forms: added tests for CsrfProtection::checkToken()