remove add/remove products as it is moved to plone.app.controlpanel
zope-root related csrf protection changes