The security token here doesn't improve the security as the other
requests that allow you to do the same thing aren't protected and I
don't see why locking or draft creation should be subject of XSRF
attacks.

This disables lock and draft creation for pages the user can't edit. It
additionally adds a security token to the draft creation and deletion
request so - at least for logged in users - drafts can't be created,
modified or deleted so easily anymore.

This works around a new "feature/bug" of Firefox 4.

If no HTML element with the id wiki__text exists, locktimer.init led to a
JavaScript error.

This reverts commit 342e58c8.

The options code had already been fixed. My mistake.

We disabled the media options shortly before the last release because of
an unfixed bug. The disabling was not complete which caused problems
with templates not incorporating the needed CSS.
Since the option dialog hasn't been fixed yet, this patch also disables
the creation of the corresponding HTML to avoid the mentioned template
problems.

Signed-off-by: Guy Brand <gb@unistra.fr>

Signed-off-by: Guy Brand <gb@unistra.fr>

The user was nameencoded twice.