Fix: remove CCP OAuth callback URI hacks.
Fix: domain changed for Google fonts.
Fix: add CSRF token to module search form in new_loadout.