Whitelist action=(un)watch

Used as a fallback for non-JS users, also unhides
the 'watch' tab/star

Change-Id: Ie8bbd0a40421d7d279fb896ebaa15a7de8cbd38a