validation method; tests, form field constant

1. Validation method without form wrapper. You need not create model for
form and field validator. Just use in controller:

if(!authenticationTokenIsValid()) return badRequest("ACCESS DENIED");

2.  Tests

3.  New constant for field name at authenticityToken view