- add ::template::csrf::validate to be used in page contracts. In difference to security::csrf::validate, this version checks, if csrf is enabled/disabled for this package
Some more Tcl cleanup - use curly brackes to enable byte code compilation - don't use "[expr ...]" when not needed - prefer "incr i -1" over "set i [expr {$i - 1}] "