Issue #1316692 by tim.plunkett, dawehner: Convert hook_admin_paths() into declarative properties on routes.

Issue #2109303 by damiankloip, ParisLiakos: Convert CSRF checks in controllers to the routing system.

Issue #1798296 by damiankloip, Xano, David_Rothstein, Crell, dawehner: Integrate CSRF link token directly into routing system.

Issue #2095121 by clemens.tolboom, jibran: Ensure every path in routing.yml files has a leading slash.

Issue #1834002 by Gábor Hojtsy: Fixed Delete operations are all over the place. Remove tabs, provide title in routing.

Issue #2051097 by dawehner, Manuel Garcia, tlattimore, neclimdul: Change 'pattern' to 'path' in *.routing.yml files.

Issue #1981368 by tim.plunkett, Crell, webchick: Convert all routes to 'module_name().foo_bar()' naming convention.

Issue #2036629 by amateescu: Fixed 'shortcut' entity type is very confusing and should be renamed to 'shortcut_set()'.

Issue #1978952 by vijaycs85, vyasamit2007, tim.plunkett: Convert shortcut_set_add() to a Controller.

Issue #1978956 by michaellenahan, naxoc, dawehner, vijaycs85, tim.plunkett: Convert shortcut_set_customize() to a Controller.

Issue #1995048 by twistor, tim.plunkett, damiankloip, Berdir: EntityListController::getOperations() should respect access checks.

Issue #1978964 by sanchiz: Convert admin/config/user-interface/shortcut/manage/%shortcut_set()/edit to a Controller.

Issue #1947432 by tim.plunkett, mtift, andypost, larowlan: Add a generic EntityAccessCheck to replace entity_page_access().