Refactor module shortlist handling using put_setting.
Pass the clftoken via POST, not GET.
Use forms for some state-altering actions instead of anchors.
Use submits for more state-altering actions.