When under a csrf attack 401 is returned instead of 403 wihich previously caused a stack overflow.
The formtag now gives an id to the csrf field.
Authored by: keess 2013-04-10
Parent: [r2545]
Child: [r2547]
