[FIX] No captcha on contactform if disabled

Fixes #1846 once merged
Merge pull request #1847 from MPOS/contactform-recaptcha-disabled

[FIX] No captcha on contactform if disabled
[FIX] Do not use CTOKEN if CSRF disabled

* [FIX] Workers page not checking for CTOKEN properly

Fixes #1848 once merged.
Merge pull request #1849 from MPOS/ctoken-missing

[FIX] Do not use CTOKEN if CSRF disabled