change tpl_actiondropdown request method to 'get'
remove security token from tpl_actiondropdown - its not necessary, we're not posting any system change
add security token back, but not for anonymous users
Merge pull request #185 from splitbrain/FS#2724

FS#2724.  fix 'are you sure' when using refresh after using tpl_actiondropdown