[webui] Rename the csrf test...
[api] fix and test manual release of products
[webui] Use an esoteric statuscode to be sure protect_from_forgery hits in CSRFTest