move javascript variables 'oc_current_user' and 'oc_requesttoken' to js....

...js - fixes #3853

@butonic @LukasReschke @schiesbn @MTGap @icewind1991 @karlitschek