Bugfix arrange shelf

Bugfix remote login
Bugfix perform Update

cps/templates/admin.html

@@ -186,6 +186,7 @@
       </table>
 
       {%  if feature_support['updater'] %}
+      <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
       <div class="hidden" id="update_error"> <span>{{update_error}}</span></div>
       <div class="btn btn-primary" id="check_for_update">{{_('Check for Update')}}</div>
       <div class="btn btn-primary hidden" id="perform_update" data-toggle="modal" data-target="#StatusDialog">{{_('Perform Update')}}</div>

cps/templates/remote_login.html

@@ -1,10 +1,11 @@
 {% extends "layout.html" %}
 {% block body %}
 <div class="well">
+  <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
   <h2 style="margin-top: 0">{{_('Magic Link - Authorise New Device')}}</h2>
   <p>
     {{_('On another device, login and visit:')}}
-  <h4><a id="verify_url" data-token="{{token}}" href="{{verify_url}}">{{verify_url}}</a></b>
+  <h4><a id="verify_url" data-token="{{token}}" href="{{verify_url}}">{{verify_url}}</a><b></b>
   </h4>
   <p>
     {{_('Once verified, you will automatically be logged in on this device.')}}
@@ -17,26 +18,4 @@
 
 {% block js %}
     <script src="{{ url_for('static', filename='js/remote_login.js') }}"></script>
-<!--script type="text/javascript">
-  (function () {
-    // Poll the server to check if the user has authenticated
-    var t = setInterval(function () {
-      $.post('{{url_for("remotelogin.token_verified")}}', { token: '{{token}}' })
-        .done(function(response) {
-          if (response.status === 'success') {
-            // Wait a tick so cookies are updated
-            setTimeout(function () {
-              window.location.href = '{{url_for("web.index")}}';
-            }, 0);
-          }
-        })
-        .fail(function (xhr) {
-          clearInterval(t);
-
-          var response = JSON.parse(xhr.responseText);
-          alert(response.message);
-        });
-    }, 5000);
-  })()
-</script-->
 {% endblock %}

cps/templates/shelf_order.html

@@ -3,6 +3,7 @@
   <div class="col-sm-8 col-lg-8 col-xs-12">
     <h2>{{title}}</h2>
     <div>{{_('Drag to Rearrange Order')}}</div>
+      <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
       <div id="sortTrue" class="list-group">
         {% for entry in entries %}
           <div id="{{entry['Books']['id']}}" class="list-group-item">