csrf test fixes and remove add/remove products form which should be now in plone.app.controlpanel