Solved problem with 'task xxx was updated' flash messages (#285). Also forgot to commit some update to the core.php required for CakePHP 2.2/2.3 migration.
Fixed #285: The CSRF errors no longer appear on pages loaded after drag/drop of tasks.