- Every change the book editor and the contents page send now carries the page's form token, and the book API refuses a change without it.
- A page left open for a long time gets a new token and saves anyway; nothing changes in how you write.
Books: changes are accepted only from Magpie's own pages
Saving, reordering, restoring and importing in a book now need the page's own form token, so another website cannot change your book while you are signed in.