[ticket/11310] Add hashes to action links to prevent CSRF attacks

PHPBB3-11310
Merge remote-tracking branch 'remotes/nickv/ticket/11310' into develop

# By Joas Schilling
# Via Joas Schilling
* remotes/nickv/ticket/11310:
  [ticket/11310] Add hashes to action links to prevent CSRF attacks