Move CSRF protection logic to AuraFormTrait

The code is the same in every form. So I move it to AuraFormTrait.

See https://github.com/koriym/BEAR.DemoApps/pull/13