Improved csrf protection for remote login

cps/templates/remote_login.html

@@ -4,7 +4,7 @@
   <h2 style="margin-top: 0">{{_('Magic Link - Authorise New Device')}}</h2>
   <p>
     {{_('On another device, login and visit:')}}
-  <h4><a id="verify_url" href="{{verify_url}}">{{verify_url}}</a></b>
+  <h4><a id="verify_url" data-token="{{token}}" href="{{verify_url}}">{{verify_url}}</a></b>
   </h4>
   <p>
     {{_('Once verified, you will automatically be logged in on this device.')}}
@@ -16,7 +16,8 @@
 {% endblock %}
 
 {% block js %}
-<script type="text/javascript">
+    <script src="{{ url_for('static', filename='js/remote_login.js') }}"></script>
+<!--script type="text/javascript">
   (function () {
     // Poll the server to check if the user has authenticated
     var t = setInterval(function () {
@@ -37,5 +38,5 @@
         });
     }, 5000);
   })()
-</script>
+</script-->
 {% endblock %}