Make Secret Token updates work when CSP is enforced (#1840)

* Make Secret Token updates work when CSP is enforced

* Update to released Jenkins 2.540

* Do not use undocumented feature of validateButton

---------

Co-authored-by: Daniel Beck <daniel-beck@users.noreply.github.com>