[1.4.x] Added a default limit to the maximum number of forms in a formset.

      This is a security fix. Disclosure and advisory coming shortly.