Issue #2670798 by goz, benjifisher, jeroen.b: "nojs"/"ajax" route parameter in use-ajax link breaks CSRF protection
Closes #2670798