check token to avoid CSRF - refs BT#7215
Merge pull request #324 from FraGoTe/7215

Check token to avoid CSRF in plugins activation - refs BT#7215