The hidden field used to guard against a CSRF attack is moved from the bottom of the form to the start of the form so it is impossible to submit the form without the hidden field being rendered.
Authored by: keess 2013-05-13
Parent: [r2547]
Child: [r2549]
