Fix Asset position for different viewables.
fixes #5590
Update MoveOrderTokenFromTokenizedPermission migration to work w/ jruby

jruby mysql adapter uses adapter_name 'MySQL'. Not recognizing this causes migrations to bomb out on jruby due to invalid SQL syntax.

https://github.com/jruby/activerecord-jdbc-adapter/blob/master/lib/arjdbc/mysql/adapter.rb#L109

fixes #5597
Validate authenticity token on all actions but populate

fixes #5601

Conflicts:
	frontend/app/controllers/spree/orders_controller.rb