Cancel link click if the user cancelled the confirmation request
Also send CSRF token for requests triggered from links
Merge branch 'ensure-confirmation'