[Koha-bugs] [Bug 37206] Removing an item from a label batch should be a CSRF-protected POST operation