FIX: Fixed action sort bug. Added CSRF token (SecurityID) to sort request

The sortable implementation on the workflow action sort was missing the CSRF token. I've added this to the JS.