Fixed #5374
Also added cancellation buttons here and there.
Prevented an exploit, resulting in ability to issue same passes with different ID, even if it doesn't have those accesses.
Merge pull request #5409 from comma/dev-freeze

Fixed #5374