user controller: protect against csrf attacks

git-svn-id: http://www.pimcore.org/svn/pimcore/private/core/trunk@4904 1f8fe7d8-47f0-464c-8d0a-336f4953ab05