Incorrect _token in empty collection

[laurent-bientz]

If we have an empty collection, the prototype doesn't any parent, leading to think that it's the root form and adding _token if csrf is enabled