diff --git a/package.json b/package.json
index 22da7f7443..7c87d1731e 100644
--- a/package.json
+++ b/package.json
@@ -57,8 +57,8 @@
     "nodebb-plugin-spam-be-gone": "0.4.9",
     "nodebb-rewards-essentials": "0.0.9",
     "nodebb-theme-lavender": "3.0.13",
-    "nodebb-theme-persona": "4.1.14",
-    "nodebb-theme-vanilla": "5.1.5",
+    "nodebb-theme-persona": "4.1.15",
+    "nodebb-theme-vanilla": "5.1.6",
     "nodebb-widget-essentials": "2.0.10",
     "nodemailer": "2.0.0",
     "nodemailer-sendmail-transport": "1.0.0",
diff --git a/public/src/ajaxify.js b/public/src/ajaxify.js
index 7280de01ed..17ac97c794 100644
--- a/public/src/ajaxify.js
+++ b/public/src/ajaxify.js
@@ -307,7 +307,7 @@ $(document).ready(function() {
 								e.preventDefault();
 							}
 						}
-					} else if (window.location.pathname !== '/outgoing') {
+					} else if (!this.target && window.location.pathname !== '/outgoing') {
 						if (config.openOutgoingLinksInNewTab) {
 							window.open(this.href, '_blank');
 							e.preventDefault();
diff --git a/src/controllers/api.js b/src/controllers/api.js
index 35f894e002..706a36cef9 100644
--- a/src/controllers/api.js
+++ b/src/controllers/api.js
@@ -222,7 +222,7 @@ apiController.getObject = function(req, res, next) {
 
 apiController.getCurrentUser = function(req, res, next) {
 	if (!req.uid) {
-		return helpers.notAllowed(req, res);
+		return res.status(401).json('not-authorized');
 	}
 	async.waterfall([
 		function(next) {
diff --git a/src/views/admin/extend/plugins.tpl b/src/views/admin/extend/plugins.tpl
index 58a8b90651..1e240b7fd6 100644
--- a/src/views/admin/extend/plugins.tpl
+++ b/src/views/admin/extend/plugins.tpl
@@ -3,7 +3,7 @@
 	<li><a href="#active" data-toggle="tab">Active</a></li>
 	<li><a href="#upgrade" data-toggle="tab">
 		Out of Date
-		<span class="badge">{../upgradeCount}</span>
+		<span class="badge">{upgradeCount}</span>
 	</a></li>
 	<li><a href="#download" data-toggle="tab">Find Plugins</a></li>
 </ul>