Bugfix - Missed xsrf token check on slider appearance change. Was masked by httpredirect so not seen on localhost, only remote server.
Bugfix - Loading via smart object now works again.