Fix drag-and-drop reorder not to have a 404. csrf_token was missing, add it as parameter for the post request
Merge branch 'master' of https://github.com/Pylons/substanced