Users can edit and delete all other user shortcuts

Description Users can edit and delete all other user shortcuts Proof of Concept Step 1. Log in as user A and make a shortcuts Step 2. View shortcut information including: ID, rowStatus, title, payload... For ex: user A creates a shortcut with ID 10 Step 3. Log in as user B and make a shortcuts...

admin/dev/shortcuts.jsp lacks an XSRF token to alter installed/.configured shortcuts

admin/dev/shortcuts.jsp does not require a csrf token to alter installed/.configured shortcuts...