Fix FormHelper::postLink() not working when SecurityComponent is enabled.

The action attribute value was not being included in the generated hash,
so postLink() forms never worked properly.

Fixes #3418