GHSA-VJ2J-6G3W-4662 Silverstripe Missing CSRF protection in login form

LoginForm calls disableSecurityToken, which causes a "shared host domain" vulnerability: http://stackoverflow.com/a/15350123...