Fix broken'Thread' and the no-javascript 'All' links (add security tokens)