Add CSRF checks to action.php callbacks
es.po - duplicate entries
Show new/old indicators in lists
Merge remote-tracking branch 'upstream/master'