Use frm instead of cur_frm in client scripts

Client scripts, form controllers and shared helpers now use the form they are given instead of relying on `cur_frm`, which points to whichever form refreshed last.