Drupal Form Security in 36 Lines of Code