Add cp_security_token to form action URLs.