Merge branch 'issue/csrf-in-users-url' into release/v1.10.2

* issue/csrf-in-users-url:
  issue: CSRF In users.inc.php URL

include/staff/users.inc.php

@@ -312,6 +312,11 @@ $(function() {
         goBaby($(this).attr('href').substr(1));
         return false;
     });
+
+    // Remove CSRF Token From GET Request
+    document.querySelector("form[action='users.php']").onsubmit = function() {
+        document.getElementsByName("__CSRFToken__")[0].remove();
+    };
 });
 </script>