Don't autosubmit form for bookmarklet requests

Closing a CSRF vulnerability. See
https://github.com/harvard-lil/perma/commit/5c216fd2f7d61d57fa137070fe81940863bf99b1#commitcomment-5445045