fixes csrf issues, removes display action, changes vars in news.js, re #3989

git-svn-id: svn://develop.studip.de/studip/trunk@29842 c5b85792-5220-0410-ad23-ed5b6b8ad999