Fix #513 - login-rebuilder CSRF
Fix #509 - Stored XSS & CSRF in simple-share-buttons-adder